General

  • Target

    06651c8f16bbef7b746a584c85ff03637e6ecc131b725b24168e7cf08726cefa

  • Size

    442KB

  • Sample

    230125-mmpa7afg36

  • MD5

    0baa4fca4d1351ee26aee097db6821ec

  • SHA1

    8640d91336343965de301f937353d2252e27345b

  • SHA256

    06651c8f16bbef7b746a584c85ff03637e6ecc131b725b24168e7cf08726cefa

  • SHA512

    44c4c02d33da4c370ccfcaee44986e920d6216bac85ee0891c357bfa86d2d2e04e6e4714f59d0b82b98cdf51442becf3c799e10440d8dca711252e56097e8748

  • SSDEEP

    12288:KaR5Fc90ibMcoH6qCBz+DR7VWR5lz5ZX:n5W9LbjoaqCEDR7VWR5V7X

Malware Config

Targets

    • Target

      06651c8f16bbef7b746a584c85ff03637e6ecc131b725b24168e7cf08726cefa

    • Size

      442KB

    • MD5

      0baa4fca4d1351ee26aee097db6821ec

    • SHA1

      8640d91336343965de301f937353d2252e27345b

    • SHA256

      06651c8f16bbef7b746a584c85ff03637e6ecc131b725b24168e7cf08726cefa

    • SHA512

      44c4c02d33da4c370ccfcaee44986e920d6216bac85ee0891c357bfa86d2d2e04e6e4714f59d0b82b98cdf51442becf3c799e10440d8dca711252e56097e8748

    • SSDEEP

      12288:KaR5Fc90ibMcoH6qCBz+DR7VWR5lz5ZX:n5W9LbjoaqCEDR7VWR5V7X

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

2
T1005

Tasks