General

  • Target
    modified.exe
  • Size 6.2MB
  • Sample261102-ba332aes8x
  • SHA256 cfa111e4e1bfbd6a6c66e41a87671323efac6828226b4784715dce82d957bad6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      modified.exe
    • Size 6.2MB
    • SHA256 cfa111e4e1bfbd6a6c66e41a87671323efac6828226b4784715dce82d957bad6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v16

Tasks