General

  • Target

    ChromeSetup.exe

  • Size

    1.3MB

  • Sample

    230614-h3jy7aeb29

  • MD5

    1f8eebeac5deb53a2c5958bc77781b28

  • SHA1

    b635aa36f754eb3e9d512f14f29e3fab9aae2b42

  • SHA256

    895607b86ba216867ae2b22806ae55cac24edbb76c1dbcf5b9e69fcaca0f17c0

  • SHA512

    346e8d134aee276fd63f8b069bbb494fe24085f847c19c8b5d437effe8866b51cf8fa8f53dd63c85d543fc74d8f1c8a9cf843e946f9f43d01195b3a18b39c7e9

  • SSDEEP

    24576:6w8KH/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI:aK51rgXteP3Vz9oI2mhoNosVDP+fX

Malware Config

Targets

    • Target

      ChromeSetup.exe

    • Size

      1.3MB

    • MD5

      1f8eebeac5deb53a2c5958bc77781b28

    • SHA1

      b635aa36f754eb3e9d512f14f29e3fab9aae2b42

    • SHA256

      895607b86ba216867ae2b22806ae55cac24edbb76c1dbcf5b9e69fcaca0f17c0

    • SHA512

      346e8d134aee276fd63f8b069bbb494fe24085f847c19c8b5d437effe8866b51cf8fa8f53dd63c85d543fc74d8f1c8a9cf843e946f9f43d01195b3a18b39c7e9

    • SSDEEP

      24576:6w8KH/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI:aK51rgXteP3Vz9oI2mhoNosVDP+fX

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks