General

  • Target

    d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077

  • Size

    391KB

  • Sample

    230725-bjgw6ahg43

  • MD5

    16f2d0aa122b49bd7f7ca17eb28e5df5

  • SHA1

    ade62b2a58d4aa6972283cd000a51fe3ff0885e8

  • SHA256

    d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077

  • SHA512

    a5619c43463f45414c04de711cb8daa20bad433f494b6912db27eeb632a6f42669893a7f85acfa24171560581febe548757fec005b2968460d0486c097a9d55c

  • SSDEEP

    12288:alJxRPSvnEVL9MtT6Mgzwni786xNPB8bKbb:altSS9M56Mgz3BxNZt

Malware Config

Targets

    • Target

      d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077

    • Size

      391KB

    • MD5

      16f2d0aa122b49bd7f7ca17eb28e5df5

    • SHA1

      ade62b2a58d4aa6972283cd000a51fe3ff0885e8

    • SHA256

      d5998de73a2e6ac2fafe81270e33b6a9fd8cef605cb56603456029b8b598c077

    • SHA512

      a5619c43463f45414c04de711cb8daa20bad433f494b6912db27eeb632a6f42669893a7f85acfa24171560581febe548757fec005b2968460d0486c097a9d55c

    • SSDEEP

      12288:alJxRPSvnEVL9MtT6Mgzwni786xNPB8bKbb:altSS9M56Mgz3BxNZt

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks