General

  • Target

    2cf01b5fefa544cf77e79f33506204d8276c4f48747ac3d8b2f3c057936f7d46

  • Size

    395KB

  • Sample

    230505-x8nlwsbf4s

  • MD5

    77bdedb2043238c038caf64a97054b7e

  • SHA1

    0119ded5f45501f3c8816437cb4678ca127124ef

  • SHA256

    2cf01b5fefa544cf77e79f33506204d8276c4f48747ac3d8b2f3c057936f7d46

  • SHA512

    d674fdfe4d6f0861048cb43b43faa5705b6fb67009039eb8a24d95e73683793a665696845a2ceddedc12db8f06e80f89f9d33fb2cdc8bb12f3e53b25ed7eb680

  • SSDEEP

    6144:YozW/o5tz+uEHmnAzJWIUxyboOLDTOvJVUC2K:YoUo5tSffHYUDT3C2K

Malware Config

Targets

    • Target

      2cf01b5fefa544cf77e79f33506204d8276c4f48747ac3d8b2f3c057936f7d46

    • Size

      395KB

    • MD5

      77bdedb2043238c038caf64a97054b7e

    • SHA1

      0119ded5f45501f3c8816437cb4678ca127124ef

    • SHA256

      2cf01b5fefa544cf77e79f33506204d8276c4f48747ac3d8b2f3c057936f7d46

    • SHA512

      d674fdfe4d6f0861048cb43b43faa5705b6fb67009039eb8a24d95e73683793a665696845a2ceddedc12db8f06e80f89f9d33fb2cdc8bb12f3e53b25ed7eb680

    • SSDEEP

      6144:YozW/o5tz+uEHmnAzJWIUxyboOLDTOvJVUC2K:YoUo5tSffHYUDT3C2K

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks