General

  • Target

    DiskInfo64.exe

  • Size

    2.7MB

  • Sample

    221203-gvffcsed8y

  • MD5

    8503f5b42ec88d5a1fee3b56e1f98e9b

  • SHA1

    0283892510d73bb34ed4db1b492b6f24cce9b553

  • SHA256

    65fa8ac9df115dc47764218a7d434ab612104a8c770c054a3e3c9b927387b001

  • SHA512

    93b1df0a2477c86f8bfc86c06cf4d818f7b93352c13d5c60380c7f33e4fe092b6a6bb908f0323fc8091048c8afaea637ca2853c5fb8f7ae107b531ea890602f1

  • SSDEEP

    24576:Qs7XeVIFJpJDAbUxeS3uFLVrzzTzkliKdX2phzngEZ6blqpG2rtDgnmnMIlL2Ycy:Bm02XzXKFV2bwnmnM4atqZdd1v+0Krb

Malware Config

Targets

    • Target

      DiskInfo64.exe

    • Size

      2.7MB

    • MD5

      8503f5b42ec88d5a1fee3b56e1f98e9b

    • SHA1

      0283892510d73bb34ed4db1b492b6f24cce9b553

    • SHA256

      65fa8ac9df115dc47764218a7d434ab612104a8c770c054a3e3c9b927387b001

    • SHA512

      93b1df0a2477c86f8bfc86c06cf4d818f7b93352c13d5c60380c7f33e4fe092b6a6bb908f0323fc8091048c8afaea637ca2853c5fb8f7ae107b531ea890602f1

    • SSDEEP

      24576:Qs7XeVIFJpJDAbUxeS3uFLVrzzTzkliKdX2phzngEZ6blqpG2rtDgnmnMIlL2Ycy:Bm02XzXKFV2bwnmnM4atqZdd1v+0Krb

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks