General

  • Target

    1c8b151ea43c86b9326fdd32c1c12f5313c817d84df2d832821e66fe0fb11552

  • Size

    25KB

  • Sample

    230828-3gh5zsbf9z

  • MD5

    106b558d1b009c2362d1093cad229aa4

  • SHA1

    d036076efc439a8dc1081c47423e09f574238fa2

  • SHA256

    1c8b151ea43c86b9326fdd32c1c12f5313c817d84df2d832821e66fe0fb11552

  • SHA512

    573eaaa0614f4863f6f3910f05ee66ffead9991e78c1469ef88e0ea2878e6cced6902e92a82d619e639e5ad5d9128df91d189f955b0f4338090216c7c67d713c

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvqB:8Q3LotOPNSQVwVVxGKEvKHrVqB

Malware Config

Targets

    • Target

      1c8b151ea43c86b9326fdd32c1c12f5313c817d84df2d832821e66fe0fb11552

    • Size

      25KB

    • MD5

      106b558d1b009c2362d1093cad229aa4

    • SHA1

      d036076efc439a8dc1081c47423e09f574238fa2

    • SHA256

      1c8b151ea43c86b9326fdd32c1c12f5313c817d84df2d832821e66fe0fb11552

    • SHA512

      573eaaa0614f4863f6f3910f05ee66ffead9991e78c1469ef88e0ea2878e6cced6902e92a82d619e639e5ad5d9128df91d189f955b0f4338090216c7c67d713c

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvqB:8Q3LotOPNSQVwVVxGKEvKHrVqB

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks