General

  • Target

    BraveBrowserSetup.exe

  • Size

    1.2MB

  • Sample

    230106-cs4b7aea57

  • MD5

    e7ab33f6884c512b39c06d0f9cc76efc

  • SHA1

    cb78431b44a243764969bc0540d215ecd0776472

  • SHA256

    8426e4e03052a442f68248b087a09064d0d0a1ac23cf766845a2e3bbfbee3cb8

  • SHA512

    c89f7bbc4025b7fcce4b92eb5c962660eaf77f8b674ee492ecf73f4a3ef7ad578ca5b08524086f3be5920f6099ff5bded1779ac731b44b5dfb444f7cb9fda93c

  • SSDEEP

    24576:h2hOdoZUbhCTG6gAH1QhhJXp9UKekuBt+HQTm5qJhG9APufamufe:UhOdokhCq+1Qv9wkEpSAmqe

Malware Config

Targets

    • Target

      BraveBrowserSetup.exe

    • Size

      1.2MB

    • MD5

      e7ab33f6884c512b39c06d0f9cc76efc

    • SHA1

      cb78431b44a243764969bc0540d215ecd0776472

    • SHA256

      8426e4e03052a442f68248b087a09064d0d0a1ac23cf766845a2e3bbfbee3cb8

    • SHA512

      c89f7bbc4025b7fcce4b92eb5c962660eaf77f8b674ee492ecf73f4a3ef7ad578ca5b08524086f3be5920f6099ff5bded1779ac731b44b5dfb444f7cb9fda93c

    • SSDEEP

      24576:h2hOdoZUbhCTG6gAH1QhhJXp9UKekuBt+HQTm5qJhG9APufamufe:UhOdokhCq+1Qv9wkEpSAmqe

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Modifies Installed Components in the registry

    • Registers COM server for autorun

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks