General
- Target tmpdr2cv_fs
- Size 3.9MB
- Sample260704-1pg7jsh18p
- SHA256 25cf8b69d26735e4baab30c70710595e7bf0a5ac54cbdd93bf0d4db64c5873db
Score
8/10
Malware Config
Targets
-
- Target tmpdr2cv_fs
- Size 3.9MB
- SHA256 25cf8b69d26735e4baab30c70710595e7bf0a5ac54cbdd93bf0d4db64c5873db
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1