General

  • Target

    92b2bc5b0530c84f41eebbaff8a1b8e1c8e7a3b6ba5fec3d2c8680de1b28ad57

  • Size

    617KB

  • Sample

    230424-m5l9jsbd56

  • MD5

    d8cd183d348df3ac083ed18a02c7dcd4

  • SHA1

    2ebc99d10e2120f8c158dd6328d39e8f9014085b

  • SHA256

    92b2bc5b0530c84f41eebbaff8a1b8e1c8e7a3b6ba5fec3d2c8680de1b28ad57

  • SHA512

    5bd013d8b6038356d71c61feb83187638ac49446e7dba8f174707cbc30b3a33de6a0ca423858509cb4863745a74a718e8b5b0143e3525befc1cb0c6332b26ad2

  • SSDEEP

    12288:0y90ncRF/FrqUXwdxT9iojoxdaKcWqGeBgrTP4Hy:0yTRBFGUXwDT9ioj6wKOGeETP4Hy

Malware Config

Targets

    • Target

      92b2bc5b0530c84f41eebbaff8a1b8e1c8e7a3b6ba5fec3d2c8680de1b28ad57

    • Size

      617KB

    • MD5

      d8cd183d348df3ac083ed18a02c7dcd4

    • SHA1

      2ebc99d10e2120f8c158dd6328d39e8f9014085b

    • SHA256

      92b2bc5b0530c84f41eebbaff8a1b8e1c8e7a3b6ba5fec3d2c8680de1b28ad57

    • SHA512

      5bd013d8b6038356d71c61feb83187638ac49446e7dba8f174707cbc30b3a33de6a0ca423858509cb4863745a74a718e8b5b0143e3525befc1cb0c6332b26ad2

    • SSDEEP

      12288:0y90ncRF/FrqUXwdxT9iojoxdaKcWqGeBgrTP4Hy:0yTRBFGUXwDT9ioj6wKOGeETP4Hy

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks