General

  • Target

    f2fe90574cdaa05665e6ecc7f6a4284739dbcd76a86602a7b3a6a0ce725b1151

  • Size

    292KB

  • Sample

    221011-vze72sffck

  • MD5

    66fc85493b92b9e5c64cf3b8f1b30f20

  • SHA1

    8b3aceb4998615650b9b933f961f383f93e7b9be

  • SHA256

    f2fe90574cdaa05665e6ecc7f6a4284739dbcd76a86602a7b3a6a0ce725b1151

  • SHA512

    6ddfc9915e090c31ae2235328ad706e7eebb8cd99a3b2b2fe1a4a68791398a3ea11a9a4fede2182fcae5684b41b5f1bf19e3a8716dc9b799183cc68318976a65

  • SSDEEP

    3072:9YkOnU4sCFGMoIls5W+wFJ9KtQ1gMkHixKwLk3adibLAOLA8fVCDQvgoL4HXhz+u:9F44IiQ1gMkHAKC+7/9UYvoXXd

Malware Config

Targets

    • Target

      f2fe90574cdaa05665e6ecc7f6a4284739dbcd76a86602a7b3a6a0ce725b1151

    • Size

      292KB

    • MD5

      66fc85493b92b9e5c64cf3b8f1b30f20

    • SHA1

      8b3aceb4998615650b9b933f961f383f93e7b9be

    • SHA256

      f2fe90574cdaa05665e6ecc7f6a4284739dbcd76a86602a7b3a6a0ce725b1151

    • SHA512

      6ddfc9915e090c31ae2235328ad706e7eebb8cd99a3b2b2fe1a4a68791398a3ea11a9a4fede2182fcae5684b41b5f1bf19e3a8716dc9b799183cc68318976a65

    • SSDEEP

      3072:9YkOnU4sCFGMoIls5W+wFJ9KtQ1gMkHixKwLk3adibLAOLA8fVCDQvgoL4HXhz+u:9F44IiQ1gMkHAKC+7/9UYvoXXd

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks