General

  • Target

    d49e20fe1786b518713c00669474d1f71cacc392dc0dab3968aa2473be7d8854

  • Size

    2.6MB

  • Sample

    231005-gkd5jsha2y

  • MD5

    c0a9b99b75aed9218217dc7ab478466d

  • SHA1

    732c8b96aba87c684850d81f17bb3572022c88b4

  • SHA256

    d49e20fe1786b518713c00669474d1f71cacc392dc0dab3968aa2473be7d8854

  • SHA512

    22c915d1fe94491bae1054be934d3e059b97cdddf9a20847cdf836ba3b0abbbfe252a49de7edff73fa4281bf395629057c5adb7be6aa3ae583d2091a27f0ea1d

  • SSDEEP

    24576:+A8vyrepIND/0bfSPdaY7RFo3UR+h+8fEvdDrGnrdEROGHOhBBoKpYC/hRJHOh:+A81IJPPqnEvdDqnroHOPHO

Malware Config

Targets

    • Target

      d49e20fe1786b518713c00669474d1f71cacc392dc0dab3968aa2473be7d8854

    • Size

      2.6MB

    • MD5

      c0a9b99b75aed9218217dc7ab478466d

    • SHA1

      732c8b96aba87c684850d81f17bb3572022c88b4

    • SHA256

      d49e20fe1786b518713c00669474d1f71cacc392dc0dab3968aa2473be7d8854

    • SHA512

      22c915d1fe94491bae1054be934d3e059b97cdddf9a20847cdf836ba3b0abbbfe252a49de7edff73fa4281bf395629057c5adb7be6aa3ae583d2091a27f0ea1d

    • SSDEEP

      24576:+A8vyrepIND/0bfSPdaY7RFo3UR+h+8fEvdDrGnrdEROGHOhBBoKpYC/hRJHOh:+A81IJPPqnEvdDqnroHOPHO

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks