General

  • Target

    66cca8c4572a3ad463bc75d5bddafeb3

  • Size

    880KB

  • Sample

    231226-mc8bbaegg7

  • MD5

    66cca8c4572a3ad463bc75d5bddafeb3

  • SHA1

    3158c505026f29f491ac584402e40ee39c716b45

  • SHA256

    6126f1bc1d8460bd63840f5d4c13501797a86e227c77ee4d6cb4787c75ccb450

  • SHA512

    bb6223204b243a6eb2cc5e985c5d49ecd626dbffccf4b591e0a905e7856c506ab69f4df48bf0d5afd0424960327ad78482ba96f6b779a00c8c59e16ca5b92755

  • SSDEEP

    24576:WBp8WDlv+glws82dl+iTCfK2qoNy1kKYUao:WBp8Whv/istdlfTCyPoNynOo

Malware Config

Targets

    • Target

      66cca8c4572a3ad463bc75d5bddafeb3

    • Size

      880KB

    • MD5

      66cca8c4572a3ad463bc75d5bddafeb3

    • SHA1

      3158c505026f29f491ac584402e40ee39c716b45

    • SHA256

      6126f1bc1d8460bd63840f5d4c13501797a86e227c77ee4d6cb4787c75ccb450

    • SHA512

      bb6223204b243a6eb2cc5e985c5d49ecd626dbffccf4b591e0a905e7856c506ab69f4df48bf0d5afd0424960327ad78482ba96f6b779a00c8c59e16ca5b92755

    • SSDEEP

      24576:WBp8WDlv+glws82dl+iTCfK2qoNy1kKYUao:WBp8Whv/istdlfTCyPoNynOo

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks