General

  • Target

    Intel-Driver-and-Support-Assistant-Installer.exe

  • Size

    6.0MB

  • Sample

    230610-fjjg7sfa2z

  • MD5

    ab8a502a6497a77cc39eae48869f59e9

  • SHA1

    0d858d54940bf3621458ded29b3ae2932ca6f9f8

  • SHA256

    eb5e791918b64c9c63ac862621aa0dd51152d904d1288310f696290e059c5c35

  • SHA512

    a819c3047a634b91436b06630a59243772a07afa134e686a5574b6b7d8a46a0d900d7fe7f45b716a24b63dfd0ff01d447c4f16fe635440e1c9061176b513de17

  • SSDEEP

    196608:DTO/17/yl3y+muA/b1MI3/QRw+tzTsml/6WifCnZ:nmlHb1MIPQC2z3lmyZ

Malware Config

Targets

    • Target

      Intel-Driver-and-Support-Assistant-Installer.exe

    • Size

      6.0MB

    • MD5

      ab8a502a6497a77cc39eae48869f59e9

    • SHA1

      0d858d54940bf3621458ded29b3ae2932ca6f9f8

    • SHA256

      eb5e791918b64c9c63ac862621aa0dd51152d904d1288310f696290e059c5c35

    • SHA512

      a819c3047a634b91436b06630a59243772a07afa134e686a5574b6b7d8a46a0d900d7fe7f45b716a24b63dfd0ff01d447c4f16fe635440e1c9061176b513de17

    • SSDEEP

      196608:DTO/17/yl3y+muA/b1MI3/QRw+tzTsml/6WifCnZ:nmlHb1MIPQC2z3lmyZ

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

5
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks