General

  • Target

    S^X.exe

  • Size

    1.4MB

  • Sample

    220923-kszm1ahfgl

  • MD5

    7591b2e25f9cf20c06311275858c4e39

  • SHA1

    fbb6dc8fd5962145e9b899a611a109c4afa38bbf

  • SHA256

    1ef07cc4e366abae38706d71e8dadd9e7ef3844b16db6a93aaab33ffc6260c17

  • SHA512

    43d61cda072154cf18147a0a692d3f1aec9c6046415ea9dc14a450d9743d105c5873738efca5308249a701c191ae6b8de216e4bb52b1c83221bfa8ec7cb5388b

  • SSDEEP

    24576:R27mrhic6gvYbAKsy5Ulh3iXWl9557sK6X3ZO0GinMSvTNWfshnGmg/ykTPnewl5:Rnrhr/vAcWKv6X3o0GQN0s/g/ybtHK

Malware Config

Targets

    • Target

      S^X.exe

    • Size

      1.4MB

    • MD5

      7591b2e25f9cf20c06311275858c4e39

    • SHA1

      fbb6dc8fd5962145e9b899a611a109c4afa38bbf

    • SHA256

      1ef07cc4e366abae38706d71e8dadd9e7ef3844b16db6a93aaab33ffc6260c17

    • SHA512

      43d61cda072154cf18147a0a692d3f1aec9c6046415ea9dc14a450d9743d105c5873738efca5308249a701c191ae6b8de216e4bb52b1c83221bfa8ec7cb5388b

    • SSDEEP

      24576:R27mrhic6gvYbAKsy5Ulh3iXWl9557sK6X3ZO0GinMSvTNWfshnGmg/ykTPnewl5:Rnrhr/vAcWKv6X3o0GQN0s/g/ybtHK

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks