General

  • Target

    1366a0040c30663905e8d8281648e953

  • Size

    228KB

  • Sample

    231230-kcl2zaagbn

  • MD5

    1366a0040c30663905e8d8281648e953

  • SHA1

    741b8af7927c44c5818fd65fd8f7ac09a1737850

  • SHA256

    e220890b4b1006192f818beb5e5a496c791890ce08877814ae5d011908755662

  • SHA512

    67f91363056045417e6afae1840cd50214726abb23abf365da668abad6a60a626e3064f11b0bfb4ccc3bae903ddc322735bbb84dbf3f8935c5b6bf6a9e2ced1e

  • SSDEEP

    6144:yuzVuw3YEZQ5iv+bqcb5BrRzuezApLVV6ip6oBjil:GMYEZQgvgqDezApLVV6ip6oBjil

Malware Config

Targets

    • Target

      1366a0040c30663905e8d8281648e953

    • Size

      228KB

    • MD5

      1366a0040c30663905e8d8281648e953

    • SHA1

      741b8af7927c44c5818fd65fd8f7ac09a1737850

    • SHA256

      e220890b4b1006192f818beb5e5a496c791890ce08877814ae5d011908755662

    • SHA512

      67f91363056045417e6afae1840cd50214726abb23abf365da668abad6a60a626e3064f11b0bfb4ccc3bae903ddc322735bbb84dbf3f8935c5b6bf6a9e2ced1e

    • SSDEEP

      6144:yuzVuw3YEZQ5iv+bqcb5BrRzuezApLVV6ip6oBjil:GMYEZQgvgqDezApLVV6ip6oBjil

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks