General

  • Target

    5758e9b25d50cf76115a0fd4ddc9ad64

  • Size

    49KB

  • Sample

    240112-yhcblsfab4

  • MD5

    5758e9b25d50cf76115a0fd4ddc9ad64

  • SHA1

    8907a9c659d40006de05e89b33a8e60171476cd1

  • SHA256

    ad178bb390381606fd8767355b25242afb592811da0fb33c21c942b31484c411

  • SHA512

    48ddb8977950130c6ca63fdd504ca065c6e360d0185590046b245f693bed93aaa9f198e1371f925d011b24b84a7c471eab71c101dd699d2e2bb4565780458a94

  • SSDEEP

    1536:bak1/1eCrSQmxTWDh0zFOTPjok+hu8uNNYNV:bakV1esSQmxTv0bjopu5NY

Malware Config

Targets

    • Target

      5758e9b25d50cf76115a0fd4ddc9ad64

    • Size

      49KB

    • MD5

      5758e9b25d50cf76115a0fd4ddc9ad64

    • SHA1

      8907a9c659d40006de05e89b33a8e60171476cd1

    • SHA256

      ad178bb390381606fd8767355b25242afb592811da0fb33c21c942b31484c411

    • SHA512

      48ddb8977950130c6ca63fdd504ca065c6e360d0185590046b245f693bed93aaa9f198e1371f925d011b24b84a7c471eab71c101dd699d2e2bb4565780458a94

    • SSDEEP

      1536:bak1/1eCrSQmxTWDh0zFOTPjok+hu8uNNYNV:bakV1esSQmxTv0bjopu5NY

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks