General

  • Target

    a2d16e005274756bd52bc7a6026cfdee2d37b23fc9e09566b9bcc4e141022315

  • Size

    999KB

  • Sample

    230421-2134tsaf89

  • MD5

    4cfd912a434b615f094d508ea5eaefa8

  • SHA1

    baa6a9bef9e19cab233306531edf49f65c1dd882

  • SHA256

    a2d16e005274756bd52bc7a6026cfdee2d37b23fc9e09566b9bcc4e141022315

  • SHA512

    50fa098837e71d23a140c7bd052ee83a3de60c96ed00be6ec04e8a0bcaf613eeb47acab9ab3424cc85614314a85860851b6568fc28228e4b5e795156bd6b5deb

  • SSDEEP

    24576:oyqZVjlHgPxbRTE2zbC7WgbnbLcdgGR5MpaNb9U+:vqfAxbhE2zwWicdgGR+p

Malware Config

Targets

    • Target

      a2d16e005274756bd52bc7a6026cfdee2d37b23fc9e09566b9bcc4e141022315

    • Size

      999KB

    • MD5

      4cfd912a434b615f094d508ea5eaefa8

    • SHA1

      baa6a9bef9e19cab233306531edf49f65c1dd882

    • SHA256

      a2d16e005274756bd52bc7a6026cfdee2d37b23fc9e09566b9bcc4e141022315

    • SHA512

      50fa098837e71d23a140c7bd052ee83a3de60c96ed00be6ec04e8a0bcaf613eeb47acab9ab3424cc85614314a85860851b6568fc28228e4b5e795156bd6b5deb

    • SSDEEP

      24576:oyqZVjlHgPxbRTE2zbC7WgbnbLcdgGR5MpaNb9U+:vqfAxbhE2zwWicdgGR+p

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks