General

  • Target

    2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3

  • Size

    538KB

  • Sample

    240815-tgem5azgqa

  • MD5

    6b1bbe4e391cdfd775780d8502ccbc41

  • SHA1

    a910f7ac9ed8fd57f7455f04e99bcd732bc8241a

  • SHA256

    2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3

  • SHA512

    9ad2ca4cc8af0b6185be87d9026da5cdac2c52ff15b0fd2ba333ff3a25016e06a294d7cf5cf32b1869a1f5e3692f071f582ba2151ac16f9be738ea7862ab57d3

  • SSDEEP

    6144:sYqdc0NkzDVATfmTIlA41QBcN3p0NIb88WsNMPaKFP3b2V122J0sL:s9J82jXgcN3CNIb88WsNMP5F1k

Malware Config

Targets

    • Target

      2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3

    • Size

      538KB

    • MD5

      6b1bbe4e391cdfd775780d8502ccbc41

    • SHA1

      a910f7ac9ed8fd57f7455f04e99bcd732bc8241a

    • SHA256

      2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3

    • SHA512

      9ad2ca4cc8af0b6185be87d9026da5cdac2c52ff15b0fd2ba333ff3a25016e06a294d7cf5cf32b1869a1f5e3692f071f582ba2151ac16f9be738ea7862ab57d3

    • SSDEEP

      6144:sYqdc0NkzDVATfmTIlA41QBcN3p0NIb88WsNMPaKFP3b2V122J0sL:s9J82jXgcN3CNIb88WsNMP5F1k

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks