General
- Target d302ba5778fac5bb12d82810958c2136d2b86c0267499075e4d947c97b4940a0.exe
- Size 8.7MB
- Sample260716-qps9psat71
- SHA256 d302ba5778fac5bb12d82810958c2136d2b86c0267499075e4d947c97b4940a0
Score
7/10
Malware Config
Targets
-
- Target d302ba5778fac5bb12d82810958c2136d2b86c0267499075e4d947c97b4940a0.exe
- Size 8.7MB
- SHA256 d302ba5778fac5bb12d82810958c2136d2b86c0267499075e4d947c97b4940a0
Score7/10-
Executes dropped EXE
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1