General

  • Target

    32118e2761a87d86cb19a6a2962ec651e8c24c0184eef7b3c362d7faa71b58ae

  • Size

    1.2MB

  • Sample

    230423-3g6ahsge62

  • MD5

    0d4cfd4df15ca17089b9535540cd08cb

  • SHA1

    8eb6e144ff9702cf8b0a7147629f1978cf9595e4

  • SHA256

    32118e2761a87d86cb19a6a2962ec651e8c24c0184eef7b3c362d7faa71b58ae

  • SHA512

    a02ccd6122c1fe4d64403096702a03162d6112c11239a63bb5ba951456f656ac34e8c6a2d5787bab1229ae888714ef544298a7428b84177a69fb9d16b56e68fe

  • SSDEEP

    24576:Du0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:S0+BshUC1VzUjjPP0/

Malware Config

Targets

    • Target

      32118e2761a87d86cb19a6a2962ec651e8c24c0184eef7b3c362d7faa71b58ae

    • Size

      1.2MB

    • MD5

      0d4cfd4df15ca17089b9535540cd08cb

    • SHA1

      8eb6e144ff9702cf8b0a7147629f1978cf9595e4

    • SHA256

      32118e2761a87d86cb19a6a2962ec651e8c24c0184eef7b3c362d7faa71b58ae

    • SHA512

      a02ccd6122c1fe4d64403096702a03162d6112c11239a63bb5ba951456f656ac34e8c6a2d5787bab1229ae888714ef544298a7428b84177a69fb9d16b56e68fe

    • SSDEEP

      24576:Du0fRlKB2ZGPoUC1VqAUjfeEB7htX0yromAWB5HpS/gl:S0+BshUC1VzUjjPP0/

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks