General

  • Target

    9aba7fbd4a91451284dd7199fa1327df53c4cd39cbbd526832d66854c63c3444

  • Size

    1.1MB

  • Sample

    230418-1hsppsgc51

  • MD5

    04eaa2ad847b7b6b668a8aede461c079

  • SHA1

    223f658f231ed71041cf52400490c1713e39a9c2

  • SHA256

    9aba7fbd4a91451284dd7199fa1327df53c4cd39cbbd526832d66854c63c3444

  • SHA512

    2ac005f6aca4bc04a17ca0f3b26ea1453d008b33c30bc9762cbc3668f37b4e98c7a92b1b6bd672509709fb2738a4a8f4b06610a00b656b1a5b97cfd9b38f63d9

  • SSDEEP

    24576:Cy2opRczYIf159suSMeKCobMzLO3wR7/vP8eFXyGKb1k:pRcMIf79suSMepoqS3Y7/vkQyGK

Malware Config

Targets

    • Target

      9aba7fbd4a91451284dd7199fa1327df53c4cd39cbbd526832d66854c63c3444

    • Size

      1.1MB

    • MD5

      04eaa2ad847b7b6b668a8aede461c079

    • SHA1

      223f658f231ed71041cf52400490c1713e39a9c2

    • SHA256

      9aba7fbd4a91451284dd7199fa1327df53c4cd39cbbd526832d66854c63c3444

    • SHA512

      2ac005f6aca4bc04a17ca0f3b26ea1453d008b33c30bc9762cbc3668f37b4e98c7a92b1b6bd672509709fb2738a4a8f4b06610a00b656b1a5b97cfd9b38f63d9

    • SSDEEP

      24576:Cy2opRczYIf159suSMeKCobMzLO3wR7/vP8eFXyGKb1k:pRcMIf79suSMepoqS3Y7/vkQyGK

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks