General

  • Target

    b1ef8e8fc35cc8f9646a29e93322ce23de31a21825ef867ba9bf903a203d5efa

  • Size

    370KB

  • Sample

    230720-k47gzseh82

  • MD5

    44f44dded8ad5ef66bd928d17f748923

  • SHA1

    68eabdb803cb5a7764364b7d30991b231de59690

  • SHA256

    b1ef8e8fc35cc8f9646a29e93322ce23de31a21825ef867ba9bf903a203d5efa

  • SHA512

    426a656a85ffc09311b49a7f894d29c6d4aa8b2d2580f6a0f855ca7cafccb94b5c9603b0c234204fce8b6eeef93c8eae56893a9abeb0d2322729cb5396564d1c

  • SSDEEP

    6144:8t0LSNWG423ZcjxPqwh6JhzkqdZBMvbjEenmgJS:+0+NWG42JcjIwhS9kN5JS

Malware Config

Targets

    • Target

      b1ef8e8fc35cc8f9646a29e93322ce23de31a21825ef867ba9bf903a203d5efa

    • Size

      370KB

    • MD5

      44f44dded8ad5ef66bd928d17f748923

    • SHA1

      68eabdb803cb5a7764364b7d30991b231de59690

    • SHA256

      b1ef8e8fc35cc8f9646a29e93322ce23de31a21825ef867ba9bf903a203d5efa

    • SHA512

      426a656a85ffc09311b49a7f894d29c6d4aa8b2d2580f6a0f855ca7cafccb94b5c9603b0c234204fce8b6eeef93c8eae56893a9abeb0d2322729cb5396564d1c

    • SSDEEP

      6144:8t0LSNWG423ZcjxPqwh6JhzkqdZBMvbjEenmgJS:+0+NWG42JcjIwhS9kN5JS

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks