General

  • Target

    70642326a2a201e646770cc9381ccd2a

  • Size

    58KB

  • Sample

    240123-ybr4gsgacm

  • MD5

    70642326a2a201e646770cc9381ccd2a

  • SHA1

    7df304ea9930e9ecbf920747766a7d4b36e08273

  • SHA256

    7232884fa26e8adade78a2da2f5fe45f3d5d21fa904acb12f0ecda78e0b0fbe5

  • SHA512

    3935d782f46361cf3c978b4b5cf816398c09747316261bdfc2097fbd35f39d4611dbac64170d0d70596bb6e249306c3d2c629c01f52c412260c87ba4102cc326

  • SSDEEP

    768:P0PFonppZMOaXDk0Tj6xP2R99zTb/Vegp+xZAj8rdBlQceElzUDNTiOQINmgC61C:fCOb0Tj6MR9BbkI+xZSudBjpOjQIoIYn

Malware Config

Targets

    • Target

      70642326a2a201e646770cc9381ccd2a

    • Size

      58KB

    • MD5

      70642326a2a201e646770cc9381ccd2a

    • SHA1

      7df304ea9930e9ecbf920747766a7d4b36e08273

    • SHA256

      7232884fa26e8adade78a2da2f5fe45f3d5d21fa904acb12f0ecda78e0b0fbe5

    • SHA512

      3935d782f46361cf3c978b4b5cf816398c09747316261bdfc2097fbd35f39d4611dbac64170d0d70596bb6e249306c3d2c629c01f52c412260c87ba4102cc326

    • SSDEEP

      768:P0PFonppZMOaXDk0Tj6xP2R99zTb/Vegp+xZAj8rdBlQceElzUDNTiOQINmgC61C:fCOb0Tj6MR9BbkI+xZSudBjpOjQIoIYn

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks