General

  • Target

    64c8b0772fc9c2077c629c5f4f3e7afb

  • Size

    313KB

  • Sample

    231226-lrrfnsadfm

  • MD5

    64c8b0772fc9c2077c629c5f4f3e7afb

  • SHA1

    a6432eabbc8de69494905126571d373b24c352d9

  • SHA256

    a75627a2f9f639e5be1c10862f678818bdf5bef2a873d4b55f29f6d91c7d7dcb

  • SHA512

    1e742a601de3796b515fdae3f75f8ff71414b10b1ce27a8d4bba3ddd7a4a1ccd467fb068e889af0cbd3cf0ffbd4f7d4b5b69be73f66a356ba4cdb6aade340565

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sS0lotSH2CCjXqVX0QCZRYGw0Tc49AqQcurn+8CBaM2UH:91OgLdaVLSHeM0JZRYPi/9ANn+mM2U

Malware Config

Targets

    • Target

      64c8b0772fc9c2077c629c5f4f3e7afb

    • Size

      313KB

    • MD5

      64c8b0772fc9c2077c629c5f4f3e7afb

    • SHA1

      a6432eabbc8de69494905126571d373b24c352d9

    • SHA256

      a75627a2f9f639e5be1c10862f678818bdf5bef2a873d4b55f29f6d91c7d7dcb

    • SHA512

      1e742a601de3796b515fdae3f75f8ff71414b10b1ce27a8d4bba3ddd7a4a1ccd467fb068e889af0cbd3cf0ffbd4f7d4b5b69be73f66a356ba4cdb6aade340565

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sS0lotSH2CCjXqVX0QCZRYGw0Tc49AqQcurn+8CBaM2UH:91OgLdaVLSHeM0JZRYPi/9ANn+mM2U

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks