General

  • Target

    d3413f8b7fc4242233552dbcdad44c80f652014c43c33389a07d538a763244ad

  • Size

    612KB

  • Sample

    230424-q1qyqadg7x

  • MD5

    87411da281ada89bd54dc798b4b122d1

  • SHA1

    1aca4f7fb310554e9a478e1e3d452b55d5994c94

  • SHA256

    d3413f8b7fc4242233552dbcdad44c80f652014c43c33389a07d538a763244ad

  • SHA512

    fac844367e1bea78eef76ac06b0360d1a213d1f7a8937120e4c0f262a41cb21764cbfd6e2cbf1117afc5d4afe151e5f6b425200b93cd261d4df7aa4ad180299e

  • SSDEEP

    12288:Iy90/z+vepJKi2wjs4cDWYrmCHGi6W4x8wNrlMYOPdaNigcqi:Iy7epJK/arYrvHGD7xNxM1gc1

Malware Config

Targets

    • Target

      d3413f8b7fc4242233552dbcdad44c80f652014c43c33389a07d538a763244ad

    • Size

      612KB

    • MD5

      87411da281ada89bd54dc798b4b122d1

    • SHA1

      1aca4f7fb310554e9a478e1e3d452b55d5994c94

    • SHA256

      d3413f8b7fc4242233552dbcdad44c80f652014c43c33389a07d538a763244ad

    • SHA512

      fac844367e1bea78eef76ac06b0360d1a213d1f7a8937120e4c0f262a41cb21764cbfd6e2cbf1117afc5d4afe151e5f6b425200b93cd261d4df7aa4ad180299e

    • SSDEEP

      12288:Iy90/z+vepJKi2wjs4cDWYrmCHGi6W4x8wNrlMYOPdaNigcqi:Iy7epJK/arYrvHGD7xNxM1gc1

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks