Resubmissions

10-06-2023 22:17

230610-17gczafh58 8

10-06-2023 22:08

230610-12gfsagf7v 8

General

  • Target

    KLSetup.exe

  • Size

    8.4MB

  • Sample

    230610-12gfsagf7v

  • MD5

    877050bc5baf4ba18c94b215f293a3cf

  • SHA1

    57fad8d44772a61e05d0fdb801ca7a5e5f0c4c83

  • SHA256

    42ceb113fa069345bbb34ccbe04664a8bf17521f793e104a83002f07e15e02e5

  • SHA512

    20d4ade62baf01c29e8f3b69e6c55fa236b50e72f64c1f7685149f777132947f85658071401d502563e4feffef8fc2910f85c05474865312c643be7b46706645

  • SSDEEP

    98304:SiRxvVu3wMWPYjmVbPbGe7idO6HVyW2iI30Ge2JW9GULDvVAlZn:9ufu1lsV/luWUULDvVAlZ

Malware Config

Targets

    • Target

      KLSetup.exe

    • Size

      8.4MB

    • MD5

      877050bc5baf4ba18c94b215f293a3cf

    • SHA1

      57fad8d44772a61e05d0fdb801ca7a5e5f0c4c83

    • SHA256

      42ceb113fa069345bbb34ccbe04664a8bf17521f793e104a83002f07e15e02e5

    • SHA512

      20d4ade62baf01c29e8f3b69e6c55fa236b50e72f64c1f7685149f777132947f85658071401d502563e4feffef8fc2910f85c05474865312c643be7b46706645

    • SSDEEP

      98304:SiRxvVu3wMWPYjmVbPbGe7idO6HVyW2iI30Ge2JW9GULDvVAlZn:9ufu1lsV/luWUULDvVAlZ

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks