General

  • Target

    e9e76e4d83f2546c5c51213590c9c67e58d997aec3871499ad053862f59b0d33

  • Size

    45KB

  • Sample

    210301-trasq73yhn

  • MD5

    a5a9aa1694b547b681d602b88e063c23

  • SHA1

    9c3635ce4c840b0431bd3dff5f5ee35f7c46ca9a

  • SHA256

    e9e76e4d83f2546c5c51213590c9c67e58d997aec3871499ad053862f59b0d33

  • SHA512

    26ca37bdd90c53f1b4a711fe1fbc39c986920b865a9457b234751f93ffda9894046a93e3ea57b8774cabdfb16a8c7fbfb532e6dc32a205fa1267363a3daf29be

Malware Config

Targets

    • Target

      e9e76e4d83f2546c5c51213590c9c67e58d997aec3871499ad053862f59b0d33

    • Size

      45KB

    • MD5

      a5a9aa1694b547b681d602b88e063c23

    • SHA1

      9c3635ce4c840b0431bd3dff5f5ee35f7c46ca9a

    • SHA256

      e9e76e4d83f2546c5c51213590c9c67e58d997aec3871499ad053862f59b0d33

    • SHA512

      26ca37bdd90c53f1b4a711fe1fbc39c986920b865a9457b234751f93ffda9894046a93e3ea57b8774cabdfb16a8c7fbfb532e6dc32a205fa1267363a3daf29be

    • Arcane log file

      Detects a log file produced by the Arcane Stealer.

    • ArcaneStealer

      Arcane Stealer is a .Net information-stealing malware that is easy to acquire in the dark web.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks