General

  • Target

    60714bce62ae8e3870b4bdab2bfcd73217f4dec786e5200b09d0c58cf9ce573e

  • Size

    562KB

  • Sample

    230424-e1wneshg28

  • MD5

    1713bbb027aceeba2a000f8121a5fddb

  • SHA1

    713c5bbcfa7e8366551b013b26dd5f84d8a3443e

  • SHA256

    60714bce62ae8e3870b4bdab2bfcd73217f4dec786e5200b09d0c58cf9ce573e

  • SHA512

    30d6c693a33c122269e5c40d2e0c4899dba917926a3fb86d8e45a6410732b74142b0af8d654b0e1f99b83e637ac60637ac33a4fe27e0668818bd021b3ba4abcc

  • SSDEEP

    12288:ny90OStalCB+mBNOXjV19qYBo1sI+7I/63H:ny4alm+mBNOXhpa1dJy3

Malware Config

Targets

    • Target

      60714bce62ae8e3870b4bdab2bfcd73217f4dec786e5200b09d0c58cf9ce573e

    • Size

      562KB

    • MD5

      1713bbb027aceeba2a000f8121a5fddb

    • SHA1

      713c5bbcfa7e8366551b013b26dd5f84d8a3443e

    • SHA256

      60714bce62ae8e3870b4bdab2bfcd73217f4dec786e5200b09d0c58cf9ce573e

    • SHA512

      30d6c693a33c122269e5c40d2e0c4899dba917926a3fb86d8e45a6410732b74142b0af8d654b0e1f99b83e637ac60637ac33a4fe27e0668818bd021b3ba4abcc

    • SSDEEP

      12288:ny90OStalCB+mBNOXjV19qYBo1sI+7I/63H:ny4alm+mBNOXhpa1dJy3

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks