General

  • Target

    2dadaff737e2b035cadd126d995a932ad7f798d4a551eb0c9770781debf4f2c7

  • Size

    25KB

  • Sample

    230918-djbq9ahb87

  • MD5

    3a6a3092b3c80a325e31780f5ccb13ba

  • SHA1

    75e29800a1a5ccc0a72fbc893051c3e5aa128ef5

  • SHA256

    2dadaff737e2b035cadd126d995a932ad7f798d4a551eb0c9770781debf4f2c7

  • SHA512

    9d3749bb7b577cdc885836480c66d15f4d649df7c344ff7960364d91ada94bcff95303e58277bd97e020631858d058bed315b42141510cd119f054ffbda99925

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv19:8Q3LotOPNSQVwVVxGKEvKHrV19

Malware Config

Targets

    • Target

      2dadaff737e2b035cadd126d995a932ad7f798d4a551eb0c9770781debf4f2c7

    • Size

      25KB

    • MD5

      3a6a3092b3c80a325e31780f5ccb13ba

    • SHA1

      75e29800a1a5ccc0a72fbc893051c3e5aa128ef5

    • SHA256

      2dadaff737e2b035cadd126d995a932ad7f798d4a551eb0c9770781debf4f2c7

    • SHA512

      9d3749bb7b577cdc885836480c66d15f4d649df7c344ff7960364d91ada94bcff95303e58277bd97e020631858d058bed315b42141510cd119f054ffbda99925

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv19:8Q3LotOPNSQVwVVxGKEvKHrV19

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks