General

  • Target

    739f624aeef107c012b32b1341129f04

  • Size

    313KB

  • Sample

    231226-q67hnadbf4

  • MD5

    739f624aeef107c012b32b1341129f04

  • SHA1

    e71cecbf7503d6f8266f166b204d0def13b97b88

  • SHA256

    316c353bb9c40ecdc70304407ed3c1b8308e79e2763a5c20133148f57308b3f3

  • SHA512

    bfeacde93d52f7414f76abd77cc1c2d7124885fc2786d380632119dbf817f45e9dc09c8ba53a54444c67c705a0d87c5cb84e474cca0d08f67a467e8a8e5878f0

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4smJrT0M7rei0PBfHiiRtTMeUW5yQU6qK:91OgLdaQ6Si0PXCWE6r

Malware Config

Targets

    • Target

      739f624aeef107c012b32b1341129f04

    • Size

      313KB

    • MD5

      739f624aeef107c012b32b1341129f04

    • SHA1

      e71cecbf7503d6f8266f166b204d0def13b97b88

    • SHA256

      316c353bb9c40ecdc70304407ed3c1b8308e79e2763a5c20133148f57308b3f3

    • SHA512

      bfeacde93d52f7414f76abd77cc1c2d7124885fc2786d380632119dbf817f45e9dc09c8ba53a54444c67c705a0d87c5cb84e474cca0d08f67a467e8a8e5878f0

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4smJrT0M7rei0PBfHiiRtTMeUW5yQU6qK:91OgLdaQ6Si0PXCWE6r

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks