General

  • Target

    870cfe796ee68557087cf7fe73e4dac7

  • Size

    313KB

  • Sample

    240201-q7cdxaggfr

  • MD5

    870cfe796ee68557087cf7fe73e4dac7

  • SHA1

    1772980420d331e5bfa229b742c41eb3d38b9e6c

  • SHA256

    3a04b56f47bba77ed0473977187e02512d68ca45b6c5281388f8cca367297bef

  • SHA512

    9a44bf4ea6615cbfdae0d2c40bd0d92bde36eb4198961f56ef64f24c0ec883879eb39a06d687fd5778a9d218be9c0017c12a66685280d6f830305269764f313f

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sPGX7tlpS/5ruIy8YMYb+HVycwV:91OgLda9X77pe5ruI3YMY+EcK

Malware Config

Targets

    • Target

      870cfe796ee68557087cf7fe73e4dac7

    • Size

      313KB

    • MD5

      870cfe796ee68557087cf7fe73e4dac7

    • SHA1

      1772980420d331e5bfa229b742c41eb3d38b9e6c

    • SHA256

      3a04b56f47bba77ed0473977187e02512d68ca45b6c5281388f8cca367297bef

    • SHA512

      9a44bf4ea6615cbfdae0d2c40bd0d92bde36eb4198961f56ef64f24c0ec883879eb39a06d687fd5778a9d218be9c0017c12a66685280d6f830305269764f313f

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sPGX7tlpS/5ruIy8YMYb+HVycwV:91OgLda9X77pe5ruI3YMY+EcK

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks