General

  • Target

    04d86dcf6e1875db7a45202cd1b4a5956ba088b00e857a4f51a3a63a5dbe311b

  • Size

    510KB

  • Sample

    231117-pj9ttshc39

  • MD5

    4348e69236360311367bdc8033a9b6e7

  • SHA1

    4df37505161fdc48445980be8222cd93d3bceacf

  • SHA256

    04d86dcf6e1875db7a45202cd1b4a5956ba088b00e857a4f51a3a63a5dbe311b

  • SHA512

    76c7c15aef9fa2030e40dbe36017c9c60d7c14a226d2b45fb484ded39c21fed17c57e2fef2945f1f50b3081fa1c1a7944c1010267ab9ffcda4f94ade2e69a414

  • SSDEEP

    6144:4+LrSF/Dt3IDYcOYGMpLlCkuP31QJCespXFgJiB/1QwZ4ko2VwlwYM:PXSFLt3kvHGEU3FeY1km/9Gko2IX

Malware Config

Targets

    • Target

      04d86dcf6e1875db7a45202cd1b4a5956ba088b00e857a4f51a3a63a5dbe311b

    • Size

      510KB

    • MD5

      4348e69236360311367bdc8033a9b6e7

    • SHA1

      4df37505161fdc48445980be8222cd93d3bceacf

    • SHA256

      04d86dcf6e1875db7a45202cd1b4a5956ba088b00e857a4f51a3a63a5dbe311b

    • SHA512

      76c7c15aef9fa2030e40dbe36017c9c60d7c14a226d2b45fb484ded39c21fed17c57e2fef2945f1f50b3081fa1c1a7944c1010267ab9ffcda4f94ade2e69a414

    • SSDEEP

      6144:4+LrSF/Dt3IDYcOYGMpLlCkuP31QJCespXFgJiB/1QwZ4ko2VwlwYM:PXSFLt3kvHGEU3FeY1km/9Gko2IX

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks