General
- Target ByteBreaker V2_32326695.exe
- Size 702KB
- Sample260717-z9rfaaat2w
- SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
Score
8/10
Malware Config
Targets
-
- Target ByteBreaker V2_32326695.exe
- Size 702KB
- SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
Score8/10Downloads MZ/PE file
Manipulates Digital Signatures
Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Network Share Discovery
Attempt to gather information on host network.
Password Policy Discovery
Attempt to access detailed information about the password policy used within an enterprise network.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1