General

  • Target

    4c25edd9d240f94ad4c9565e26ee3e660033da7f49e00289649e2e422019b0b7

  • Size

    26KB

  • Sample

    230918-cyhyfaed2x

  • MD5

    53b0223f56a791fef1e82daabcb439f9

  • SHA1

    e164b78dab7f34a2fafd82a5a99544abc1f5f2e0

  • SHA256

    4c25edd9d240f94ad4c9565e26ee3e660033da7f49e00289649e2e422019b0b7

  • SHA512

    434f8e7c9ea922600af3f76da4356f987101071c0fe6f67ab2eab25d6ed1e8cc587f7df817d8c28cfe51f4860b031304ac5a15c0546b010737ebec7419eb39db

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvVAP:8Q3LotOPNSQVwVVxGKEvKHrVVAP

Malware Config

Targets

    • Target

      4c25edd9d240f94ad4c9565e26ee3e660033da7f49e00289649e2e422019b0b7

    • Size

      26KB

    • MD5

      53b0223f56a791fef1e82daabcb439f9

    • SHA1

      e164b78dab7f34a2fafd82a5a99544abc1f5f2e0

    • SHA256

      4c25edd9d240f94ad4c9565e26ee3e660033da7f49e00289649e2e422019b0b7

    • SHA512

      434f8e7c9ea922600af3f76da4356f987101071c0fe6f67ab2eab25d6ed1e8cc587f7df817d8c28cfe51f4860b031304ac5a15c0546b010737ebec7419eb39db

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvVAP:8Q3LotOPNSQVwVVxGKEvKHrVVAP

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks