General

  • Target

    3c919d91c3476b01b277438ae203d03a54595f238a35901d71d6e5205707cc07

  • Size

    1.2MB

  • Sample

    240524-eevt1aca6y

  • MD5

    57f6df2c799f12f8d86c39385b537bbe

  • SHA1

    c48a69f1191a03db39ac853986b037e25c0acc7f

  • SHA256

    3c919d91c3476b01b277438ae203d03a54595f238a35901d71d6e5205707cc07

  • SHA512

    a64c2bb8927519e5c55e91c308f5e30aefd98f90f9d4f6f464de063ff6432a681353f0e95e603bd23d7a9a6219d50ec391c07da789eb827436490d8efda1b813

  • SSDEEP

    24576:YMgCKbZh5SH6qf3RVDbhH6QkvTt6IcfZ0QViYXIEWnq3oG9g/xWn:ngC+5SaqjXhMt6p2QzXIEWnq3oG9g/xs

Malware Config

Targets

    • Target

      3c919d91c3476b01b277438ae203d03a54595f238a35901d71d6e5205707cc07

    • Size

      1.2MB

    • MD5

      57f6df2c799f12f8d86c39385b537bbe

    • SHA1

      c48a69f1191a03db39ac853986b037e25c0acc7f

    • SHA256

      3c919d91c3476b01b277438ae203d03a54595f238a35901d71d6e5205707cc07

    • SHA512

      a64c2bb8927519e5c55e91c308f5e30aefd98f90f9d4f6f464de063ff6432a681353f0e95e603bd23d7a9a6219d50ec391c07da789eb827436490d8efda1b813

    • SSDEEP

      24576:YMgCKbZh5SH6qf3RVDbhH6QkvTt6IcfZ0QViYXIEWnq3oG9g/xWn:ngC+5SaqjXhMt6p2QzXIEWnq3oG9g/xs

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks