General

  • Target
    AutoRewarder-Setup.exe
  • Size 74.6MB
  • Sample260702-vekl2aas4s
  • SHA256 939dfb1180f27ba41eca0dc11c9aa16b1df0718d49e9dd81321efa4ca5abccb4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AutoRewarder-Setup.exe
    • Size 74.6MB
    • SHA256 939dfb1180f27ba41eca0dc11c9aa16b1df0718d49e9dd81321efa4ca5abccb4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Uses browser remote debugging

      Can be used control the browser and steal sensitive information such as credentials and session cookies.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Password Policy Discovery

      Attempt to access detailed information about the password policy used within an enterprise network.

MITRE ATT&CK Enterprise v16

Tasks