General

  • Target

    a5016a33b9eda72e755a6824518c761b07bcd2c6bce837faa7aab013bc31a6eb

  • Size

    25KB

  • Sample

    230901-jhqrnsdg59

  • MD5

    3a7d5b35fb6ccc27442ee1663c7907c3

  • SHA1

    b392feb36212700433cb8767bc9715b1a9ca41c2

  • SHA256

    a5016a33b9eda72e755a6824518c761b07bcd2c6bce837faa7aab013bc31a6eb

  • SHA512

    679be36588a03ca4abd18e48ca47fd452983a08c21f05d193c5736a34428dcb42e0bc59598dc78366e57ff908309daebb516678dc8c726d9fe93cb7d065fd223

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv+Z:8Q3LotOPNSQVwVVxGKEvKHrVU

Malware Config

Targets

    • Target

      a5016a33b9eda72e755a6824518c761b07bcd2c6bce837faa7aab013bc31a6eb

    • Size

      25KB

    • MD5

      3a7d5b35fb6ccc27442ee1663c7907c3

    • SHA1

      b392feb36212700433cb8767bc9715b1a9ca41c2

    • SHA256

      a5016a33b9eda72e755a6824518c761b07bcd2c6bce837faa7aab013bc31a6eb

    • SHA512

      679be36588a03ca4abd18e48ca47fd452983a08c21f05d193c5736a34428dcb42e0bc59598dc78366e57ff908309daebb516678dc8c726d9fe93cb7d065fd223

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv+Z:8Q3LotOPNSQVwVVxGKEvKHrVU

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks