General

  • Target

    edac0bc8fada382060c20450da5b06e98bd78160a62049498e64106ea7fab8c7

  • Size

    563KB

  • Sample

    230423-3b6n4aaa61

  • MD5

    4cbfc18b02dcde3f42c8ed152034e7c2

  • SHA1

    9c71950763b20464f1046fc5fe87833fb6e18619

  • SHA256

    edac0bc8fada382060c20450da5b06e98bd78160a62049498e64106ea7fab8c7

  • SHA512

    e22ae2abab305b35315a3c5c62b90208036e86d89579acf6ed2f93a39ec2b970b86117cf02ea9ee033fe58e6f0e8ae2921cd9a88a655847d7deaaa6baf4fbcda

  • SSDEEP

    12288:Vy90znBqgvkhLlIcAz20tUzGMHkgtPBg0Snzx2F:VyOnBqftsBtUCoxdOzd6

Malware Config

Targets

    • Target

      edac0bc8fada382060c20450da5b06e98bd78160a62049498e64106ea7fab8c7

    • Size

      563KB

    • MD5

      4cbfc18b02dcde3f42c8ed152034e7c2

    • SHA1

      9c71950763b20464f1046fc5fe87833fb6e18619

    • SHA256

      edac0bc8fada382060c20450da5b06e98bd78160a62049498e64106ea7fab8c7

    • SHA512

      e22ae2abab305b35315a3c5c62b90208036e86d89579acf6ed2f93a39ec2b970b86117cf02ea9ee033fe58e6f0e8ae2921cd9a88a655847d7deaaa6baf4fbcda

    • SSDEEP

      12288:Vy90znBqgvkhLlIcAz20tUzGMHkgtPBg0Snzx2F:VyOnBqftsBtUCoxdOzd6

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks