General

  • Target

    e93d5c26e4a946754eb0089f2f30c98dede3d43a832e75d9903152401c982255

  • Size

    569KB

  • Sample

    230422-fky92scg56

  • MD5

    569c38cc11db547fd4bba39304e5b4ab

  • SHA1

    bb2c3afc95f6d2fbf4b452e521e39ffa0c4cbb5b

  • SHA256

    e93d5c26e4a946754eb0089f2f30c98dede3d43a832e75d9903152401c982255

  • SHA512

    a9c09c4209929b9a08746ddfca9292f783b98041f367e0d6f7ef0233f91e36a7da029a559761fad7f209b7a5df4066a6fe83b48b34f6562ebea0ca4155699a86

  • SSDEEP

    12288:Ay909uWi7m8MYA7xIGo3J0IPE3dWnWY8L0LTgIrvL1glWVH:AySuWCAto5ZstWnmLYhoWF

Malware Config

Targets

    • Target

      e93d5c26e4a946754eb0089f2f30c98dede3d43a832e75d9903152401c982255

    • Size

      569KB

    • MD5

      569c38cc11db547fd4bba39304e5b4ab

    • SHA1

      bb2c3afc95f6d2fbf4b452e521e39ffa0c4cbb5b

    • SHA256

      e93d5c26e4a946754eb0089f2f30c98dede3d43a832e75d9903152401c982255

    • SHA512

      a9c09c4209929b9a08746ddfca9292f783b98041f367e0d6f7ef0233f91e36a7da029a559761fad7f209b7a5df4066a6fe83b48b34f6562ebea0ca4155699a86

    • SSDEEP

      12288:Ay909uWi7m8MYA7xIGo3J0IPE3dWnWY8L0LTgIrvL1glWVH:AySuWCAto5ZstWnmLYhoWF

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks