General

  • Target

    ec1f14832bf159d720aeceada202c8fd7c8f078c131af27319753cc07572d510

  • Size

    333KB

  • Sample

    221203-dn5vwsdb6z

  • MD5

    ebaf7018be3db6a2573f5fe5a5d45b9c

  • SHA1

    e884d8efd0b5d8f13dce0afad8a3fbdd420a7f37

  • SHA256

    ec1f14832bf159d720aeceada202c8fd7c8f078c131af27319753cc07572d510

  • SHA512

    24ba2dc4ba2a4deef1c5efa95f8bf95daeaecc93068a8151bdb4b098ba14489dd15693d3bbe0ebe4cb1ae4bcbaf9c8f0eda31f0cdf505cb6d741d590d3487f8e

  • SSDEEP

    768:0Hl9VH/Wn3ohbSB6PMjNahOgGz5iyi2zC+p1dOGwFIXxqaSJfneYyMw/NBDGPJEr:e9FDpDGz4CC+pvOCBNmeNMw1Bs6

Malware Config

Targets

    • Target

      ec1f14832bf159d720aeceada202c8fd7c8f078c131af27319753cc07572d510

    • Size

      333KB

    • MD5

      ebaf7018be3db6a2573f5fe5a5d45b9c

    • SHA1

      e884d8efd0b5d8f13dce0afad8a3fbdd420a7f37

    • SHA256

      ec1f14832bf159d720aeceada202c8fd7c8f078c131af27319753cc07572d510

    • SHA512

      24ba2dc4ba2a4deef1c5efa95f8bf95daeaecc93068a8151bdb4b098ba14489dd15693d3bbe0ebe4cb1ae4bcbaf9c8f0eda31f0cdf505cb6d741d590d3487f8e

    • SSDEEP

      768:0Hl9VH/Wn3ohbSB6PMjNahOgGz5iyi2zC+p1dOGwFIXxqaSJfneYyMw/NBDGPJEr:e9FDpDGz4CC+pvOCBNmeNMw1Bs6

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks