General

  • Target

    file.exe

  • Size

    444KB

  • Sample

    230504-mydntsdf21

  • MD5

    c582b416b25b2ba867b8fe5eb6689840

  • SHA1

    143aac36254bffac0f237c8361c82a119f598ddb

  • SHA256

    bac75b214eb22276795f6f379db9958bdb6ff386f231da4984c875ceea732dca

  • SHA512

    f6f6944285625e8f2f7836cb8cda9849727958fbcd9da315c56fe532714124f1332c002bef18a5f5cb40ed19e2cc82b2ae8d13db7cd515707d4f7c2f65c5f785

  • SSDEEP

    6144:Al85sQnL5iVkD+LAZ5RwKGZsTo1F3zcbwVLt:IusQnL5iyDnts1FkwL

Malware Config

Targets

    • Target

      file.exe

    • Size

      444KB

    • MD5

      c582b416b25b2ba867b8fe5eb6689840

    • SHA1

      143aac36254bffac0f237c8361c82a119f598ddb

    • SHA256

      bac75b214eb22276795f6f379db9958bdb6ff386f231da4984c875ceea732dca

    • SHA512

      f6f6944285625e8f2f7836cb8cda9849727958fbcd9da315c56fe532714124f1332c002bef18a5f5cb40ed19e2cc82b2ae8d13db7cd515707d4f7c2f65c5f785

    • SSDEEP

      6144:Al85sQnL5iVkD+LAZ5RwKGZsTo1F3zcbwVLt:IusQnL5iyDnts1FkwL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks