General

  • Target

    817ee46423164cf2502ae2accffecaa1

  • Size

    174KB

  • Sample

    230221-ye3pdsab4x

  • MD5

    817ee46423164cf2502ae2accffecaa1

  • SHA1

    565cf5d2a163b63cf77e15e9e0800f760e7af92a

  • SHA256

    350edaca28b1572c31165431bafc7d1e0552c45f3186ffa039de33a58e55144e

  • SHA512

    5fa849b19455fdb0f6b20cd393f6cdea5b23d79ba0263533d3dfdad8b0ef517c3729201b67e06b4c56bb71db1b956eba888b28ae6ac8b2d9415ae99fe7c07b46

  • SSDEEP

    3072:zVIfP18LszB9a93iz5AOmbKtpJCjutK6n58+ZMCTXlmIghEHCL9OqiWLBWQAAf:zo18eY3sSOGc5HMel+hEHEqw

Malware Config

Targets

    • Target

      817ee46423164cf2502ae2accffecaa1

    • Size

      174KB

    • MD5

      817ee46423164cf2502ae2accffecaa1

    • SHA1

      565cf5d2a163b63cf77e15e9e0800f760e7af92a

    • SHA256

      350edaca28b1572c31165431bafc7d1e0552c45f3186ffa039de33a58e55144e

    • SHA512

      5fa849b19455fdb0f6b20cd393f6cdea5b23d79ba0263533d3dfdad8b0ef517c3729201b67e06b4c56bb71db1b956eba888b28ae6ac8b2d9415ae99fe7c07b46

    • SSDEEP

      3072:zVIfP18LszB9a93iz5AOmbKtpJCjutK6n58+ZMCTXlmIghEHCL9OqiWLBWQAAf:zo18eY3sSOGc5HMel+hEHEqw

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

2
T1005

Tasks