General

  • Target

    ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355

  • Size

    697KB

  • Sample

    230426-vlv2cace6t

  • MD5

    6efc55934592cb8a85fa3a83f993e28b

  • SHA1

    6cee545cc11d14da88aefae0cde0ad44eaee2940

  • SHA256

    ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355

  • SHA512

    d21b01eb3020aae0fed567e1845ab88c521b54c8ed6df7823cb32198710f076605a7cf95958191e0c003f89e07a08e1249c560cf29490fe20f033410f4764a9f

  • SSDEEP

    12288:ty90fnQ4MUmOE9EQxywvAj9ujjNNCaW3EwXldSVhhYWj57vlzO:ty/4xc9EQxyLYjBmZXlQnnfzO

Malware Config

Targets

    • Target

      ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355

    • Size

      697KB

    • MD5

      6efc55934592cb8a85fa3a83f993e28b

    • SHA1

      6cee545cc11d14da88aefae0cde0ad44eaee2940

    • SHA256

      ec8e63103dbd25e27239eafb0c5e218c5da2d8e464792bb5100309a2812de355

    • SHA512

      d21b01eb3020aae0fed567e1845ab88c521b54c8ed6df7823cb32198710f076605a7cf95958191e0c003f89e07a08e1249c560cf29490fe20f033410f4764a9f

    • SSDEEP

      12288:ty90fnQ4MUmOE9EQxywvAj9ujjNNCaW3EwXldSVhhYWj57vlzO:ty/4xc9EQxyLYjBmZXlQnnfzO

    • Modifies Windows Defender Real-time Protection settings

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks