General

  • Target

    d0336cf10b94532e87b92612422e5874f93d2e708907b7cc6ae2a881e2cdcaed

  • Size

    702KB

  • Sample

    230423-xjmnasgh5y

  • MD5

    ede61ad1981cc24f8031533306ac863c

  • SHA1

    a5d2a30be6e88a9efb9864211aaf41cb1cf46fff

  • SHA256

    d0336cf10b94532e87b92612422e5874f93d2e708907b7cc6ae2a881e2cdcaed

  • SHA512

    f6ec923be12a9b2da2cfcaa70a2bcd9ff36781143142bea1cbc84b8cb10cc1d6fcf95b261913e3357436f603baf80c01cd696bd48b8bfde2955b0421f2198549

  • SSDEEP

    12288:Sy90BWIJUKatM/D3Ialf55N2x/B7XjkoL0rHeaNiFlFv:SyKuKEMbYalfx2x/B7zk5+RR

Malware Config

Targets

    • Target

      d0336cf10b94532e87b92612422e5874f93d2e708907b7cc6ae2a881e2cdcaed

    • Size

      702KB

    • MD5

      ede61ad1981cc24f8031533306ac863c

    • SHA1

      a5d2a30be6e88a9efb9864211aaf41cb1cf46fff

    • SHA256

      d0336cf10b94532e87b92612422e5874f93d2e708907b7cc6ae2a881e2cdcaed

    • SHA512

      f6ec923be12a9b2da2cfcaa70a2bcd9ff36781143142bea1cbc84b8cb10cc1d6fcf95b261913e3357436f603baf80c01cd696bd48b8bfde2955b0421f2198549

    • SSDEEP

      12288:Sy90BWIJUKatM/D3Ialf55N2x/B7XjkoL0rHeaNiFlFv:SyKuKEMbYalfx2x/B7zk5+RR

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks