General
- Target MicrosoftSecurity.exe
- Size 17.9MB
- Sample260910-q9cgpavape
- SHA256 ce067db5641b7fa5c59f9c8735a85d207772699e5128ce345d39a9886bc2b8a1
Score
7/10
Malware Config
Targets
-
- Target MicrosoftSecurity.exe
- Size 17.9MB
- SHA256 ce067db5641b7fa5c59f9c8735a85d207772699e5128ce345d39a9886bc2b8a1
Score7/10-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target MicrosoftSecurityApp.pyc
- Size 124KB
- SHA256 610c04824606b8f713d972e6328c1b5382a20f8cf663f7c151cdf5d83dbb6e37
Score3/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3