General

  • Target

    46ee251aebe86b22acd02c0342dc936b35daae826dc718ecdac450770e5ddfcf

  • Size

    138KB

  • Sample

    221003-vevr1affcl

  • MD5

    3ab34a0c01b6ff74863fde2c61ca27d6

  • SHA1

    63cfbb9925a2e7bdcc4030caba1b7dc08c8a38af

  • SHA256

    46ee251aebe86b22acd02c0342dc936b35daae826dc718ecdac450770e5ddfcf

  • SHA512

    c75e60b6780090dd437ee76a34155488de8b71199d1be11b608aa7c149c8b1f42c0be1d98b9af2a30f4c7cf473404238426b0754ccb4a71104b447fb990df0d3

  • SSDEEP

    1536:K5G5Ct7mZDNpzZHudMAgGo2DVNatfjmkyt2eLT5RU:wG5ChipzN+MGo2DVvkAjT5RU

Malware Config

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    lamerd3000

Targets

    • Target

      46ee251aebe86b22acd02c0342dc936b35daae826dc718ecdac450770e5ddfcf

    • Size

      138KB

    • MD5

      3ab34a0c01b6ff74863fde2c61ca27d6

    • SHA1

      63cfbb9925a2e7bdcc4030caba1b7dc08c8a38af

    • SHA256

      46ee251aebe86b22acd02c0342dc936b35daae826dc718ecdac450770e5ddfcf

    • SHA512

      c75e60b6780090dd437ee76a34155488de8b71199d1be11b608aa7c149c8b1f42c0be1d98b9af2a30f4c7cf473404238426b0754ccb4a71104b447fb990df0d3

    • SSDEEP

      1536:K5G5Ct7mZDNpzZHudMAgGo2DVNatfjmkyt2eLT5RU:wG5ChipzN+MGo2DVvkAjT5RU

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks