General

  • Target

    3eb99ff875dd397b5beed12e3662984cc4afdea2ff6998155b9c74869050d93c.bat

  • Size

    178KB

  • Sample

    230521-fj7j2aah6t

  • MD5

    8eac2855d5a48ec13d6d71a463f40e27

  • SHA1

    bd62756f0c9a7b1351d95a4f89e4a2703fe3e8b1

  • SHA256

    3eb99ff875dd397b5beed12e3662984cc4afdea2ff6998155b9c74869050d93c

  • SHA512

    9930c77c10f1cef28607b2bebe6c2710679bd2e5bab2274bb7404f187c58d6bd69e657f7545a1af486393108fc7ac45465f9d982f422c37b3875d9b3d1a2b28f

  • SSDEEP

    3072:ySP4raypoA8VXIUrjXqRWqdFzcvV55hXyivw80Bc+werehaGp2Okk61qFYLk:RPQ+hqseRWqdw5TV4xCtmelp2Okk61ql

Malware Config

Targets

    • Target

      3eb99ff875dd397b5beed12e3662984cc4afdea2ff6998155b9c74869050d93c.bat

    • Size

      178KB

    • MD5

      8eac2855d5a48ec13d6d71a463f40e27

    • SHA1

      bd62756f0c9a7b1351d95a4f89e4a2703fe3e8b1

    • SHA256

      3eb99ff875dd397b5beed12e3662984cc4afdea2ff6998155b9c74869050d93c

    • SHA512

      9930c77c10f1cef28607b2bebe6c2710679bd2e5bab2274bb7404f187c58d6bd69e657f7545a1af486393108fc7ac45465f9d982f422c37b3875d9b3d1a2b28f

    • SSDEEP

      3072:ySP4raypoA8VXIUrjXqRWqdFzcvV55hXyivw80Bc+werehaGp2Okk61qFYLk:RPQ+hqseRWqdw5TV4xCtmelp2Okk61ql

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks