General

  • Target

    03f33d4022725145e8dc287d627b4949e7b923bee37300cd821b41fc198e1a19

  • Size

    569KB

  • Sample

    230422-gdwq1sda47

  • MD5

    7968e799d14cbbbb2bbfa0d653b9b2fa

  • SHA1

    b5b7bc36ac2957d1b21e1984625c4cbce55f5b86

  • SHA256

    03f33d4022725145e8dc287d627b4949e7b923bee37300cd821b41fc198e1a19

  • SHA512

    9ba8eee34836bf0de86316b21ebc565a6ee8bd6a8e0985aace58ffa5142fcbac2e68d062566a4730df0ad5c119221e4b8721c5e042cc43e87bdb5d782d7e3433

  • SSDEEP

    12288:2y90B32HBhDNJF4p7obWUiFJd+nFY8G0HTcRX0rL1eZ+4b:2y83oBhI8b7it+nnG8PHY3b

Malware Config

Targets

    • Target

      03f33d4022725145e8dc287d627b4949e7b923bee37300cd821b41fc198e1a19

    • Size

      569KB

    • MD5

      7968e799d14cbbbb2bbfa0d653b9b2fa

    • SHA1

      b5b7bc36ac2957d1b21e1984625c4cbce55f5b86

    • SHA256

      03f33d4022725145e8dc287d627b4949e7b923bee37300cd821b41fc198e1a19

    • SHA512

      9ba8eee34836bf0de86316b21ebc565a6ee8bd6a8e0985aace58ffa5142fcbac2e68d062566a4730df0ad5c119221e4b8721c5e042cc43e87bdb5d782d7e3433

    • SSDEEP

      12288:2y90B32HBhDNJF4p7obWUiFJd+nFY8G0HTcRX0rL1eZ+4b:2y83oBhI8b7it+nnG8PHY3b

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks