General

  • Target

    0ed038e9cfbe01c40c8ddd1baeeb636f

  • Size

    496KB

  • Sample

    231230-fa5dbafaaq

  • MD5

    0ed038e9cfbe01c40c8ddd1baeeb636f

  • SHA1

    71ae2b0f8451cfe0612ca1d3761f019203f9e9fd

  • SHA256

    7f00ad7a3e21707d66880a14f2adb02b075a213b827d846be398920cdbeffa7b

  • SHA512

    4fc9692304213bfbe182d0051dd4a4ed11aa0945e98690aad16b631bae2e98294b5ee6edad8f2b1c66f4be6f319d2337907610604a6c6dd11fd767da4e1f2d0f

  • SSDEEP

    12288:91OgLda/xed5OsWtEAGd8flAD0lZ77WE4QypE07XKW:91OYda/YWtEPd8fG4HGE4QypErW

Malware Config

Targets

    • Target

      0ed038e9cfbe01c40c8ddd1baeeb636f

    • Size

      496KB

    • MD5

      0ed038e9cfbe01c40c8ddd1baeeb636f

    • SHA1

      71ae2b0f8451cfe0612ca1d3761f019203f9e9fd

    • SHA256

      7f00ad7a3e21707d66880a14f2adb02b075a213b827d846be398920cdbeffa7b

    • SHA512

      4fc9692304213bfbe182d0051dd4a4ed11aa0945e98690aad16b631bae2e98294b5ee6edad8f2b1c66f4be6f319d2337907610604a6c6dd11fd767da4e1f2d0f

    • SSDEEP

      12288:91OgLda/xed5OsWtEAGd8flAD0lZ77WE4QypE07XKW:91OYda/YWtEPd8fG4HGE4QypErW

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks