General
- Target keyser.exe
- Size 34.1MB
- Sample260810-tv2ptasgmd
- SHA256 d3237dfd5e7b8e91a7b7652c7c2cc72b619c638c3453b6101a2448d26cc63981
Score
7/10
Malware Config
Targets
-
- Target keyser.exe
- Size 34.1MB
- SHA256 d3237dfd5e7b8e91a7b7652c7c2cc72b619c638c3453b6101a2448d26cc63981
Score7/10-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target temp_stub_compiled.pyc
- Size 46KB
- SHA256 9d96f504cfc2693527087d811f7edf2aa58a065c6470a9c51e585cb71f7966d7
Score3/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1