General

  • Target

    21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd.zip

  • Size

    6.4MB

  • Sample

    230321-qpvsjaae49

  • MD5

    3a4eb5a608a7f698f94591e13dcda568

  • SHA1

    7a96a680b739713280450a0d480001c48cce08a4

  • SHA256

    73bd16b792c74493d0f7d5e5e1d613c094b299b9f71398e94bd9250501e53e66

  • SHA512

    69a2504ac8f3d0232de6efcff640166e1459f30363f4673b9299f2cb4684cda27024b62d5dcd130fbd90f70ce086f2921e02bfcc4e4a470820686c9d8ce025af

  • SSDEEP

    98304:AzReWpTJ0mLo+3ccQB/QsFy9jkOfZmtWq+9Gym8lmgvQWIj1hVtNP7Xo0XpMuYbe:AzRlpJajPbOhmtWRdjQj7xt8bS7/

Malware Config

Targets

    • Target

      21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd.exe

    • Size

      6.8MB

    • MD5

      31a11a0b81f43eeb43887467bbebf5fd

    • SHA1

      187eb286dd68d8421c55a8615ab584cdc280b108

    • SHA256

      21e4c999735b8078454d3407c9556aade8d9d477c3b7d2aebc3eee5b5670a3bd

    • SHA512

      924efe7a92bac35662e5a0e12f49ee18fcd37866d9e2fe7fed3776bc94d87c3a738bffa9bf1b87b47dc1a58154160f5bea2cb026b8204aecaa3cca759386a0f8

    • SSDEEP

      98304:zNESvhK3NdZ79CL5ii5wSreJUHKX0l+6p1TzUbjOl9czfxkcVrnkF9QUa8RP:5dKV9CYSwSrgUHKXXKijWWzfxkornzc

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v6

Tasks