General

  • Target
    ojujn.exe
  • Size 776KB
  • Sample260824-xta29asdnb
  • SHA256 0a3db60f639f65ee7be02baa180b554d999920ba5c3bb89108f90da003c35b68
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ojujn.exe
    • Size 776KB
    • SHA256 0a3db60f639f65ee7be02baa180b554d999920ba5c3bb89108f90da003c35b68
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks