General
-
Target
6b1bbe4e391cdfd775780d8502ccbc41.bin
-
Size
178KB
-
Sample
240817-bqp64sscpr
-
MD5
e401cfce111d837d75480e15b76c3b46
-
SHA1
5380e2897d1342719153d77e6476038b0238793b
-
SHA256
15c8d230d16356902e59ecb9deda87e764deed7f99d576bb121845348465b592
-
SHA512
b7359d2ab6e95ecee413ae1bbb869a994c30d13bd7bc6d65db149977aa013556334b40c857257d7572c7a1883cec92c9bbaf6bf3dde01369e41637f1491a93b9
-
SSDEEP
3072:JczgADlzF8EzJn1wPOg+x9+IY6QDbw5iyKE/ZnZdjLiAw3yUfOT7:JQ75p8CwP0xkIY3bwIylZZ5JNmY
Malware Config
Targets
-
-
Target
2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3.exe
-
Size
538KB
-
MD5
6b1bbe4e391cdfd775780d8502ccbc41
-
SHA1
a910f7ac9ed8fd57f7455f04e99bcd732bc8241a
-
SHA256
2999b0ecf157b9f37dcfa1cb4a0ffff73092c416499a356fdb1558d66985e9a3
-
SHA512
9ad2ca4cc8af0b6185be87d9026da5cdac2c52ff15b0fd2ba333ff3a25016e06a294d7cf5cf32b1869a1f5e3692f071f582ba2151ac16f9be738ea7862ab57d3
-
SSDEEP
6144:sYqdc0NkzDVATfmTIlA41QBcN3p0NIb88WsNMPaKFP3b2V122J0sL:s9J82jXgcN3CNIb88WsNMP5F1k
Score9/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-