General

  • Target

    a6fb51f37c5d93e55bd0fdf2e40a3cb63f87c7600f0e528a6f3f992ff204a4d8

  • Size

    647KB

  • Sample

    221107-ndmxfadbf5

  • MD5

    0e870a0e9fe930cd3a02d02ddf0d7ad0

  • SHA1

    01c7e22d895d9cd69e3ed50e81124f285ca42f02

  • SHA256

    a6fb51f37c5d93e55bd0fdf2e40a3cb63f87c7600f0e528a6f3f992ff204a4d8

  • SHA512

    cac78730d0e609d32bbde9ed28387c274d2dcaf8c42b7749591905564137386a7d7b272e8b9d8e6c105932f2598ff8f40808d4b1aa702abac503e284d953364e

  • SSDEEP

    12288:1pSrU96Qtnh2IUuyba+GbubYwAEkAVnQgqiaSgWQgVzLP2+2FDX1G:1mU9hthfaW+Iub7mAVnQ3XpDmzLP2PXo

Malware Config

Targets

    • Target

      a6fb51f37c5d93e55bd0fdf2e40a3cb63f87c7600f0e528a6f3f992ff204a4d8

    • Size

      647KB

    • MD5

      0e870a0e9fe930cd3a02d02ddf0d7ad0

    • SHA1

      01c7e22d895d9cd69e3ed50e81124f285ca42f02

    • SHA256

      a6fb51f37c5d93e55bd0fdf2e40a3cb63f87c7600f0e528a6f3f992ff204a4d8

    • SHA512

      cac78730d0e609d32bbde9ed28387c274d2dcaf8c42b7749591905564137386a7d7b272e8b9d8e6c105932f2598ff8f40808d4b1aa702abac503e284d953364e

    • SSDEEP

      12288:1pSrU96Qtnh2IUuyba+GbubYwAEkAVnQgqiaSgWQgVzLP2+2FDX1G:1mU9hthfaW+Iub7mAVnQ3XpDmzLP2PXo

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks