General
- Target smss
- Size 272.5MB
- Sample260420-bywc4abs7w
- SHA256 88a8d6c28fcd9b72d67b5bbb128d451d3f81f77efe6d53a6f6acca4a3c74b075
Score
8/10
Malware Config
Targets
-
- Target smss.exe
- Size 85.6MB
- SHA256 d36fb75a8c48f1ea8609f25abc5f6de73c8929eedf09e97ba0862af270435ab9
Score8/10Uses browser remote debugging
Can be used control the browser and steal sensitive information such as credentials and session cookies.
Loads dropped DLL
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Modify Authentication Process
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1