General

  • Target

    7e80021513952ce86891862f3f849e49e0e1d9067072585008e480bb50e6f4e6

  • Size

    698KB

  • Sample

    230422-yzy7psac2v

  • MD5

    310b3548368070a10f328a33456f9bd5

  • SHA1

    3cfd2836b8d532d98b6a08ae1d09216329f28137

  • SHA256

    7e80021513952ce86891862f3f849e49e0e1d9067072585008e480bb50e6f4e6

  • SHA512

    85715f3ea8124ece467db619840f6eda25f9d5c8b1676f82f78ef29640d0d5ad245ea7492d993fda205520c177691ab8ffc2d89b578d803637151f953354e33d

  • SSDEEP

    12288:7y90A/Jd7wxnnGMnsKOC9l1zEfv/U/UGtaLtGv9U4ODsO9GQ:7y/Jd74JsKOC9/2U/pta4kAOQQ

Malware Config

Targets

    • Target

      7e80021513952ce86891862f3f849e49e0e1d9067072585008e480bb50e6f4e6

    • Size

      698KB

    • MD5

      310b3548368070a10f328a33456f9bd5

    • SHA1

      3cfd2836b8d532d98b6a08ae1d09216329f28137

    • SHA256

      7e80021513952ce86891862f3f849e49e0e1d9067072585008e480bb50e6f4e6

    • SHA512

      85715f3ea8124ece467db619840f6eda25f9d5c8b1676f82f78ef29640d0d5ad245ea7492d993fda205520c177691ab8ffc2d89b578d803637151f953354e33d

    • SSDEEP

      12288:7y90A/Jd7wxnnGMnsKOC9l1zEfv/U/UGtaLtGv9U4ODsO9GQ:7y/Jd74JsKOC9/2U/pta4kAOQQ

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks