General

  • Target

    3febd5c630366c99ada1b8a58cd4dbdd

  • Size

    309KB

  • Sample

    231225-2bed6sbge8

  • MD5

    3febd5c630366c99ada1b8a58cd4dbdd

  • SHA1

    4d518830a2e7b9530dedf1265e61dfc888a78aef

  • SHA256

    39e8ea9114bc6880fe79dda3387dd43163d1681da96c583b450d6114b08e3cb0

  • SHA512

    c0b78680c63f4e5b003778995d8a4332a3e707c1841ad76c38ebb33ccee95c5ad7eba51e28e204e1027196a89e7eab309bdbd988b9a8fae1c7174d31a4ab83b2

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4ssH6LxVbG7S7zes/EaAvTyDwUcdu:91OgLda3H67KizREkwUcdu

Malware Config

Targets

    • Target

      3febd5c630366c99ada1b8a58cd4dbdd

    • Size

      309KB

    • MD5

      3febd5c630366c99ada1b8a58cd4dbdd

    • SHA1

      4d518830a2e7b9530dedf1265e61dfc888a78aef

    • SHA256

      39e8ea9114bc6880fe79dda3387dd43163d1681da96c583b450d6114b08e3cb0

    • SHA512

      c0b78680c63f4e5b003778995d8a4332a3e707c1841ad76c38ebb33ccee95c5ad7eba51e28e204e1027196a89e7eab309bdbd988b9a8fae1c7174d31a4ab83b2

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4ssH6LxVbG7S7zes/EaAvTyDwUcdu:91OgLda3H67KizREkwUcdu

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks