General

  • Target

    52b5c0365df1e83d524f4db8d2e5ff5513ebdaf66557038ec1a853e1c20be987

  • Size

    25KB

  • Sample

    230904-byzqhsdb9w

  • MD5

    0fcf808799a56b500f0d38738741a25f

  • SHA1

    cbc54523fa458c4514056f012b895955f3a8d5c1

  • SHA256

    52b5c0365df1e83d524f4db8d2e5ff5513ebdaf66557038ec1a853e1c20be987

  • SHA512

    8a4a82374f801b1ed3a9481164996d88af41545204e0df783da37d697e104cea80045923b7dae0aa18d39d1f411cec434c95666b26fcc5c2d69ef3fa7533cd3c

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvn2Wk:8Q3LotOPNSQVwVVxGKEvKHrVn2H

Malware Config

Targets

    • Target

      52b5c0365df1e83d524f4db8d2e5ff5513ebdaf66557038ec1a853e1c20be987

    • Size

      25KB

    • MD5

      0fcf808799a56b500f0d38738741a25f

    • SHA1

      cbc54523fa458c4514056f012b895955f3a8d5c1

    • SHA256

      52b5c0365df1e83d524f4db8d2e5ff5513ebdaf66557038ec1a853e1c20be987

    • SHA512

      8a4a82374f801b1ed3a9481164996d88af41545204e0df783da37d697e104cea80045923b7dae0aa18d39d1f411cec434c95666b26fcc5c2d69ef3fa7533cd3c

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvn2Wk:8Q3LotOPNSQVwVVxGKEvKHrVn2H

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks