General

  • Target

    7f72cb7a1976dd696faf1e0e9b433787f33402169d6f244e89ee76407c7dfceb

  • Size

    747KB

  • Sample

    230425-bzzf5sfg46

  • MD5

    64c6af0d726e8bdc733bec6ba2fc2c9e

  • SHA1

    1b5bc6aa120c4140b73c1862cee6a9f59972a86b

  • SHA256

    7f72cb7a1976dd696faf1e0e9b433787f33402169d6f244e89ee76407c7dfceb

  • SHA512

    b2d3c9d40618b65b10011a959ab5b77e35b6362b21ccb2f48830f8c218845856b889ecffbde24339ac5d3d5e6b400df775c1fa9406571762cd888c88ab465297

  • SSDEEP

    12288:ty90UrGiNnVhsahev8onCHD5VE5/EVaO1XzjTzQgIzc3UJlj4nNPZR9F0IY:tyBBNnVqx0BH3EBmjjHQgIzc3SYNP/9k

Malware Config

Targets

    • Target

      7f72cb7a1976dd696faf1e0e9b433787f33402169d6f244e89ee76407c7dfceb

    • Size

      747KB

    • MD5

      64c6af0d726e8bdc733bec6ba2fc2c9e

    • SHA1

      1b5bc6aa120c4140b73c1862cee6a9f59972a86b

    • SHA256

      7f72cb7a1976dd696faf1e0e9b433787f33402169d6f244e89ee76407c7dfceb

    • SHA512

      b2d3c9d40618b65b10011a959ab5b77e35b6362b21ccb2f48830f8c218845856b889ecffbde24339ac5d3d5e6b400df775c1fa9406571762cd888c88ab465297

    • SSDEEP

      12288:ty90UrGiNnVhsahev8onCHD5VE5/EVaO1XzjTzQgIzc3UJlj4nNPZR9F0IY:tyBBNnVqx0BH3EBmjjHQgIzc3SYNP/9k

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks