General

  • Target

    146d3a793456c871091acdbecda76216d9234dfd135d98035bdbca04e0393d8f

  • Size

    397KB

  • Sample

    230206-yr2mvsah6y

  • MD5

    ffa4fd590f2ff12acde05909903d145e

  • SHA1

    fd636f1c8880cf48a5509de0597105249a0677c1

  • SHA256

    146d3a793456c871091acdbecda76216d9234dfd135d98035bdbca04e0393d8f

  • SHA512

    82694fd2f94e906d0f8032c2a65f48b3c5ef0dda1a50d6c1009aa18e45982f35115d528aaf9ecad304096ee69136cf1a4862f4fe15d58036c893248c02d8e55d

  • SSDEEP

    6144:ClULLnUV0BdcbePO1CSRDPZyDANdp7+nxZuQj9fSa:C6LDe0ciPOMSRDPosJ70ljc

Malware Config

Targets

    • Target

      146d3a793456c871091acdbecda76216d9234dfd135d98035bdbca04e0393d8f

    • Size

      397KB

    • MD5

      ffa4fd590f2ff12acde05909903d145e

    • SHA1

      fd636f1c8880cf48a5509de0597105249a0677c1

    • SHA256

      146d3a793456c871091acdbecda76216d9234dfd135d98035bdbca04e0393d8f

    • SHA512

      82694fd2f94e906d0f8032c2a65f48b3c5ef0dda1a50d6c1009aa18e45982f35115d528aaf9ecad304096ee69136cf1a4862f4fe15d58036c893248c02d8e55d

    • SSDEEP

      6144:ClULLnUV0BdcbePO1CSRDPZyDANdp7+nxZuQj9fSa:C6LDe0ciPOMSRDPosJ70ljc

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Collection

Data from Local System

1
T1005

Tasks