General

  • Target

    172edb5ab5805d7f92d6bc37882fc890

  • Size

    257KB

  • Sample

    231225-mhwvgafed3

  • MD5

    172edb5ab5805d7f92d6bc37882fc890

  • SHA1

    51f1a0b5997d3dd3da0338e132300ff129958f61

  • SHA256

    3a0063ecedd92daddcd0dd1c0bd7f550219a578c2186d5437d9d3d0f5fcbf019

  • SHA512

    19118d2fce2edcdd7109dd7f24a0d492fe87c8b2bee7398e57351f56a8dc494c51ba76b899d0ea1205337eb88d37af1f45399d4806f9a886db166bf0c1c1e19e

  • SSDEEP

    3072:9n1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsWjkSz1GNlM9QtLUYULVjf6d66S/:91OgDPdkBAFZWjadD4sezUmnITgEsH

Malware Config

Targets

    • Target

      172edb5ab5805d7f92d6bc37882fc890

    • Size

      257KB

    • MD5

      172edb5ab5805d7f92d6bc37882fc890

    • SHA1

      51f1a0b5997d3dd3da0338e132300ff129958f61

    • SHA256

      3a0063ecedd92daddcd0dd1c0bd7f550219a578c2186d5437d9d3d0f5fcbf019

    • SHA512

      19118d2fce2edcdd7109dd7f24a0d492fe87c8b2bee7398e57351f56a8dc494c51ba76b899d0ea1205337eb88d37af1f45399d4806f9a886db166bf0c1c1e19e

    • SSDEEP

      3072:9n1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsWjkSz1GNlM9QtLUYULVjf6d66S/:91OgDPdkBAFZWjadD4sezUmnITgEsH

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks