General

  • Target

    83a5a090edac0d0656596eeb19997d344556767a0c6dabb7d17026d838acc4f1

  • Size

    319KB

  • Sample

    221204-ah6y8ahh67

  • MD5

    7c01ab32c6832c0f346d5479a17a8eed

  • SHA1

    30fb3e2c69fefc11c02b49d4226a3daa4da85eaf

  • SHA256

    83a5a090edac0d0656596eeb19997d344556767a0c6dabb7d17026d838acc4f1

  • SHA512

    493178cfd1d7092d348c6db681532ece628d167e0519a33e00cb549e6c1d3089099c5c82c0d43d392ec2c3549c1f32a21efabba25ad108d476c5b93ea06239f0

  • SSDEEP

    1536:LLlbJrui4GTKFsNgEvjUpb35xjb9Hfqd9j:vlbki4Gua6aUpb35xv9Hfm

Malware Config

Targets

    • Target

      83a5a090edac0d0656596eeb19997d344556767a0c6dabb7d17026d838acc4f1

    • Size

      319KB

    • MD5

      7c01ab32c6832c0f346d5479a17a8eed

    • SHA1

      30fb3e2c69fefc11c02b49d4226a3daa4da85eaf

    • SHA256

      83a5a090edac0d0656596eeb19997d344556767a0c6dabb7d17026d838acc4f1

    • SHA512

      493178cfd1d7092d348c6db681532ece628d167e0519a33e00cb549e6c1d3089099c5c82c0d43d392ec2c3549c1f32a21efabba25ad108d476c5b93ea06239f0

    • SSDEEP

      1536:LLlbJrui4GTKFsNgEvjUpb35xjb9Hfqd9j:vlbki4Gua6aUpb35xv9Hfm

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks