General

  • Target

    cf1c73af9189192e8c3c2d0ff7c760bd.bin

  • Size

    1.1MB

  • Sample

    240312-encpsagb2t

  • MD5

    cf1c73af9189192e8c3c2d0ff7c760bd

  • SHA1

    92667c42320a0166927604786d5dd1eec25b9f0e

  • SHA256

    4f227a6aa678927b69aaeaa4d463c035726795bdc5e78a4914c84e3c7ff1ead3

  • SHA512

    2f0b0827785bd775155fade73374f83cd74433519f6fb249ec499008ba4cb6eec8077cee7c7d3b416dc945f0286fb15bfcd13605284e99c31032213b0169d659

  • SSDEEP

    24576:gJsiy4TXXXRLzNxDreoVvsV1pKm++w7FhQz9rFJcWu4uV01FfnoNHPqaoZxdC:gJsYXRzV+QmLwjQRrz2V01FPo1boZm

Malware Config

Targets

    • Target

      ChromeSetup.exe

    • Size

      1.2MB

    • MD5

      1430438f19e3d3e2b375d127c68254ab

    • SHA1

      6f4d60d13590ba68231d307bc7aa62054a557cab

    • SHA256

      38dbb5166b28e62fbc482646618a55dc8430fa596d98df6f3eed257df0007db0

    • SHA512

      11e4ab54f9f6664fa0c1ba829af3af73bd93b052a04d80051c187884b2f3ee4dce7402c2fec5e3d691429f7b2c4a13da35669b13d486e0c706f66146a24c398d

    • SSDEEP

      24576:esSWkfRyE2ZcFGUEGNBffACErtoFAocYj+uY64YF5AjXEx2Je7CVSszVrmWW:0WJE2ZctEafitmGYj+uYP4D2VPrX

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks