General

  • Target

    c325080b3a7ebbdf167fe2d5a816dd972c6e7bcb93ba9261ef2c1a7b0841fdac

  • Size

    1.4MB

  • Sample

    240601-jezv6sfa35

  • MD5

    4130b339ad7707ba19249b5b96a20ac1

  • SHA1

    e75f9c0e2d853627d5610e20739343ad4c3cb3e5

  • SHA256

    c325080b3a7ebbdf167fe2d5a816dd972c6e7bcb93ba9261ef2c1a7b0841fdac

  • SHA512

    7b54328f54b196316d978dc1451f5fa265f93bc976a024c3768de60ca46ba53abb5a7c35bb190cae94582684c013be1c7e87aada830c7a1a11020773efb6ded6

  • SSDEEP

    24576:Nw8KH/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI:rK51rgXteP3Vz9oI2mhoNosVDP+fX

Malware Config

Targets

    • Target

      c325080b3a7ebbdf167fe2d5a816dd972c6e7bcb93ba9261ef2c1a7b0841fdac

    • Size

      1.4MB

    • MD5

      4130b339ad7707ba19249b5b96a20ac1

    • SHA1

      e75f9c0e2d853627d5610e20739343ad4c3cb3e5

    • SHA256

      c325080b3a7ebbdf167fe2d5a816dd972c6e7bcb93ba9261ef2c1a7b0841fdac

    • SHA512

      7b54328f54b196316d978dc1451f5fa265f93bc976a024c3768de60ca46ba53abb5a7c35bb190cae94582684c013be1c7e87aada830c7a1a11020773efb6ded6

    • SSDEEP

      24576:Nw8KH/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI:rK51rgXteP3Vz9oI2mhoNosVDP+fX

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks