General

  • Target

    80585fdcac50fcb14065f49144cb94c6c594aa2cb58ee4ebd4299137a8d0ccb5.bin

  • Size

    100KB

  • Sample

    220427-yh2w9saec2

  • MD5

    3a408f90771ca5a14034949b30870655

  • SHA1

    a26dd439547af6495b57d3a2cc945985e70e6635

  • SHA256

    80585fdcac50fcb14065f49144cb94c6c594aa2cb58ee4ebd4299137a8d0ccb5

  • SHA512

    6e4ea7de68278242c6ee16d577b2331f9c4faf275219e2e0219bd8300697ff2b3ff7de4655b81f96312d41ecbbaeac6555ce4b0bc170290c1869e79c6b0748c0

Malware Config

Targets

    • Target

      80585fdcac50fcb14065f49144cb94c6c594aa2cb58ee4ebd4299137a8d0ccb5.bin

    • Size

      100KB

    • MD5

      3a408f90771ca5a14034949b30870655

    • SHA1

      a26dd439547af6495b57d3a2cc945985e70e6635

    • SHA256

      80585fdcac50fcb14065f49144cb94c6c594aa2cb58ee4ebd4299137a8d0ccb5

    • SHA512

      6e4ea7de68278242c6ee16d577b2331f9c4faf275219e2e0219bd8300697ff2b3ff7de4655b81f96312d41ecbbaeac6555ce4b0bc170290c1869e79c6b0748c0

    • Poullight

      Poullight is an information stealer first seen in March 2020.

    • Poullight Stealer Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks