General

  • Target

    palemoon-32.2.0.win64.installer.exe

  • Size

    34.3MB

  • Sample

    230530-xe277abb83

  • MD5

    888c165af869966911a197c54520345f

  • SHA1

    5f3b26cfe02b053d814bae4d61e2d05b1eef35a2

  • SHA256

    fc997eec917d784666f4ef306923fdf74c5662d444c62620fabf971f6241ded5

  • SHA512

    9fa342ea05811de40486aadd61a24e74d1f803a79740f36461e63608f08c0963b4050fb95498413a95c4d282dbb34690fc850b5c01d637bd3c7fe33fe7a22c59

  • SSDEEP

    786432:gWD5L5hbI09uUAk31I46xQXTSzLbDujUgIqvgxaTcShuZaWiFZY2:DRRLAB46xQWZgIqvgM+8O2

Malware Config

Targets

    • Target

      palemoon-32.2.0.win64.installer.exe

    • Size

      34.3MB

    • MD5

      888c165af869966911a197c54520345f

    • SHA1

      5f3b26cfe02b053d814bae4d61e2d05b1eef35a2

    • SHA256

      fc997eec917d784666f4ef306923fdf74c5662d444c62620fabf971f6241ded5

    • SHA512

      9fa342ea05811de40486aadd61a24e74d1f803a79740f36461e63608f08c0963b4050fb95498413a95c4d282dbb34690fc850b5c01d637bd3c7fe33fe7a22c59

    • SSDEEP

      786432:gWD5L5hbI09uUAk31I46xQXTSzLbDujUgIqvgxaTcShuZaWiFZY2:DRRLAB46xQWZgIqvgM+8O2

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks