General

  • Target

    96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0

  • Size

    705KB

  • Sample

    230423-qc5f7sdd99

  • MD5

    d29b42d7f15d04821ce343dbfa670bfa

  • SHA1

    279481b20f5f555832645482398ba0e86c33f136

  • SHA256

    96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0

  • SHA512

    4ee95a4cca9ff7e1aea27cda1e632b66da80457390580cb53d87995e2cf6870b5d0482dfcb1d0a3c398671042b0e44d2bd3c870b9d2a4dd474231ad8feda0d59

  • SSDEEP

    12288:ny90iE0TC8N71zAfREjZujIxDFDYZ/0rWJ895g2PoyzPh6dzYUdFH/63K:nydE0rN71sZiojgJSV0tAykdUUdh/6a

Malware Config

Targets

    • Target

      96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0

    • Size

      705KB

    • MD5

      d29b42d7f15d04821ce343dbfa670bfa

    • SHA1

      279481b20f5f555832645482398ba0e86c33f136

    • SHA256

      96d019facaf8a26de2300eb6cc84ccfef215193e912f67c9ecafbc7007122ff0

    • SHA512

      4ee95a4cca9ff7e1aea27cda1e632b66da80457390580cb53d87995e2cf6870b5d0482dfcb1d0a3c398671042b0e44d2bd3c870b9d2a4dd474231ad8feda0d59

    • SSDEEP

      12288:ny90iE0TC8N71zAfREjZujIxDFDYZ/0rWJ895g2PoyzPh6dzYUdFH/63K:nydE0rN71sZiojgJSV0tAykdUUdh/6a

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks