General

  • Target

    7e5e627985966c286000851514c61a7b9d5b160f23c2e95455c6c73a16745b4a

  • Size

    1.1MB

  • Sample

    230420-mtqslahd39

  • MD5

    5df2bbda3e40c1e6693c1e332e8acda2

  • SHA1

    e80e9e5949ee794b58984eb7d40dd1b4b54e4100

  • SHA256

    7e5e627985966c286000851514c61a7b9d5b160f23c2e95455c6c73a16745b4a

  • SHA512

    ea5740d76b65c821dc1a38986eedcbf6706df1ad16ff4fc7e522b224e4a7d1ae1a3d3a5843d3f7751f1678b5c90ec833db9c3e33b13118997b16b6963213c330

  • SSDEEP

    24576:ayppvl6dwXg8ULTVpdFFIjxtRZ68Py8DIBHlzXHZooIEl:hh6wULT1axtR08PycaFDjIE

Malware Config

Targets

    • Target

      7e5e627985966c286000851514c61a7b9d5b160f23c2e95455c6c73a16745b4a

    • Size

      1.1MB

    • MD5

      5df2bbda3e40c1e6693c1e332e8acda2

    • SHA1

      e80e9e5949ee794b58984eb7d40dd1b4b54e4100

    • SHA256

      7e5e627985966c286000851514c61a7b9d5b160f23c2e95455c6c73a16745b4a

    • SHA512

      ea5740d76b65c821dc1a38986eedcbf6706df1ad16ff4fc7e522b224e4a7d1ae1a3d3a5843d3f7751f1678b5c90ec833db9c3e33b13118997b16b6963213c330

    • SSDEEP

      24576:ayppvl6dwXg8ULTVpdFFIjxtRZ68Py8DIBHlzXHZooIEl:hh6wULT1axtR08PycaFDjIE

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks