General

  • Target

    0x001b00000001249b-58.dat

  • Size

    368KB

  • Sample

    230208-bhbnrage67

  • MD5

    6ea56f0ff90f1cfe62615fdbdaeb5ba4

  • SHA1

    ff2489fb612cb737e21b9013e685afb1ebc2990b

  • SHA256

    082dc4388285b15951b87c857703a2fc5aad3bccb0f8c0e4c1445d0c0a6f4cf8

  • SHA512

    868bdf4b1ffb4fca16f99fcd3fa4bd484fa7a1a19f96c2da446cd89b71a7c171b752783e07df846360f3f05137c9b6cf8f65dc3bb415dc7dca2c3b675c317818

  • SSDEEP

    6144:8Hd2snAZDkCZbuuq3D3Fr6PMXDuOYijvafhtfhDV9nUBi1M2am:8Hd2snsDkCFqDFeMXKujvafhBhDV9se

Malware Config

Targets

    • Target

      0x001b00000001249b-58.dat

    • Size

      368KB

    • MD5

      6ea56f0ff90f1cfe62615fdbdaeb5ba4

    • SHA1

      ff2489fb612cb737e21b9013e685afb1ebc2990b

    • SHA256

      082dc4388285b15951b87c857703a2fc5aad3bccb0f8c0e4c1445d0c0a6f4cf8

    • SHA512

      868bdf4b1ffb4fca16f99fcd3fa4bd484fa7a1a19f96c2da446cd89b71a7c171b752783e07df846360f3f05137c9b6cf8f65dc3bb415dc7dca2c3b675c317818

    • SSDEEP

      6144:8Hd2snAZDkCZbuuq3D3Fr6PMXDuOYijvafhtfhDV9nUBi1M2am:8Hd2snsDkCFqDFeMXKujvafhBhDV9se

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses 2FA software files, possible credential harvesting

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks