General

  • Target

    3110a15e1d0ccf5c10798393bdfa7b1a02a11d895bbb41ad168930c42ad35acf

  • Size

    1.3MB

  • Sample

    240422-y1keyafg2s

  • MD5

    feedbe7df2aff933eed8682e9e25c9b2

  • SHA1

    abed60effd1851cb8b8bad0759d4bdd6b6734c61

  • SHA256

    3110a15e1d0ccf5c10798393bdfa7b1a02a11d895bbb41ad168930c42ad35acf

  • SHA512

    234b9d65394fd8dd4c86d8563af5e382aa6a3723fc6e716debf69b953c725558dfb9a84d7a031506e7a5ee028c551b73481bcdc6f8a1311b0c18b48b8f0c5486

  • SSDEEP

    24576:Qak/7Nk4RZhgKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/TFZu+k0WdEacJRIo+E

Malware Config

Targets

    • Target

      3110a15e1d0ccf5c10798393bdfa7b1a02a11d895bbb41ad168930c42ad35acf

    • Size

      1.3MB

    • MD5

      feedbe7df2aff933eed8682e9e25c9b2

    • SHA1

      abed60effd1851cb8b8bad0759d4bdd6b6734c61

    • SHA256

      3110a15e1d0ccf5c10798393bdfa7b1a02a11d895bbb41ad168930c42ad35acf

    • SHA512

      234b9d65394fd8dd4c86d8563af5e382aa6a3723fc6e716debf69b953c725558dfb9a84d7a031506e7a5ee028c551b73481bcdc6f8a1311b0c18b48b8f0c5486

    • SSDEEP

      24576:Qak/7Nk4RZhgKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/TFZu+k0WdEacJRIo+E

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks