General

  • Target

    c6ab8f476eb9a46212997d448ea938299c96d80ecd01b3a47a4672964e9c7689

  • Size

    487KB

  • Sample

    230416-rv3wrsad53

  • MD5

    b6261b4a37267f17129b27726177e37c

  • SHA1

    f0ba94c1a45ac26967b73659900d157d4b02731e

  • SHA256

    c6ab8f476eb9a46212997d448ea938299c96d80ecd01b3a47a4672964e9c7689

  • SHA512

    9f5beea898342a4747f50da5ccc8af7ecad62771fc1baf28d7eb539a49c661f2170dc2a9f563de8d15e788fc762faa90fe372a7f61480a5681a847e55aa69424

  • SSDEEP

    12288:gXiombMSGO8MAhO5Z4g8IbhjO+aBIHk5IqVrKr:gSoETGrBhA8whjO+aBI8Id

Malware Config

Targets

    • Target

      c6ab8f476eb9a46212997d448ea938299c96d80ecd01b3a47a4672964e9c7689

    • Size

      487KB

    • MD5

      b6261b4a37267f17129b27726177e37c

    • SHA1

      f0ba94c1a45ac26967b73659900d157d4b02731e

    • SHA256

      c6ab8f476eb9a46212997d448ea938299c96d80ecd01b3a47a4672964e9c7689

    • SHA512

      9f5beea898342a4747f50da5ccc8af7ecad62771fc1baf28d7eb539a49c661f2170dc2a9f563de8d15e788fc762faa90fe372a7f61480a5681a847e55aa69424

    • SSDEEP

      12288:gXiombMSGO8MAhO5Z4g8IbhjO+aBIHk5IqVrKr:gSoETGrBhA8whjO+aBI8Id

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks