General

  • Target
    ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d.bin
  • Size 603KB
  • Sample261113-bajpdses31
  • SHA256 ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d.bin
    • Size 603KB
    • SHA256 ccb3d3608738021405f14fd68b4d8a185aa66b5df5c60d714e5156815486882d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Downloads a file with CertUtil

      CertUtil's URL cache options fetch arbitrary files from a web server, which can be used to retrieve further payloads.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks