General

  • Target
    SWIFTMT10300000.bat.exe
  • Size 1.5MB
  • Sample230105-hzyceaef7v
  • SHA256 aed18cdef3de7bb5192dec939a7b6e8989ce8a6dd1da25ae640f8f2586b29eae
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      SWIFTMT10300000.bat.exe
    • Size 1.5MB
    • SHA256 aed18cdef3de7bb5192dec939a7b6e8989ce8a6dd1da25ae640f8f2586b29eae
    • MD5 SHA1 SHA512 SSDEEP
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks