General

  • Target
    Afy8NqgmRehaIKs.exe
  • Size 288KB
  • Sample200624-9grrceze1a
  • SHA256 ca6d30359259e4b3387ea8cde986038557c85550fe9d2eadfc5bf40777fb2cfb
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      Afy8NqgmRehaIKs.exe
    • Size 288KB
    • SHA256 ca6d30359259e4b3387ea8cde986038557c85550fe9d2eadfc5bf40777fb2cfb
    • MD5 SHA1 SHA512
    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run entry to start application

    • Checks whether UAC is enabled

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks