General

  • Target

    0386be8c1d75cad6154347f5bea008f9

  • Size

    313KB

  • Sample

    231224-srhbbsdaej

  • MD5

    0386be8c1d75cad6154347f5bea008f9

  • SHA1

    bd4b516722f9d415368097b04485bc487175bf68

  • SHA256

    2d469c604ff4cd3931054750e02a855f7400ebdcc2069f4ed4ab53f135e7fd9d

  • SHA512

    6191778ea759708fe315b6c9b4e0253d0098e3ba493578626aa4200a55eb4a91bbd96c1c305ff1eacf7f4d7fd2a528890b34e391d157ee9acb37b42b910d4035

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s2ACZEALf498e0mu+6pJXil:91OgLdagCZbLw985mL6pJSl

Malware Config

Targets

    • Target

      0386be8c1d75cad6154347f5bea008f9

    • Size

      313KB

    • MD5

      0386be8c1d75cad6154347f5bea008f9

    • SHA1

      bd4b516722f9d415368097b04485bc487175bf68

    • SHA256

      2d469c604ff4cd3931054750e02a855f7400ebdcc2069f4ed4ab53f135e7fd9d

    • SHA512

      6191778ea759708fe315b6c9b4e0253d0098e3ba493578626aa4200a55eb4a91bbd96c1c305ff1eacf7f4d7fd2a528890b34e391d157ee9acb37b42b910d4035

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s2ACZEALf498e0mu+6pJXil:91OgLdagCZbLw985mL6pJSl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks