General

  • Target

    63270bf50ff41e45c1009a505c2b9564f82ca1962dc6095c3f146e28f4560b5b

  • Size

    25KB

  • Sample

    231003-cw5z7afg6s

  • MD5

    3b55c46d207ca7b69e6e68a758152d38

  • SHA1

    b73602b83ad81ee88cb65322248a95b3fc1d0ff0

  • SHA256

    63270bf50ff41e45c1009a505c2b9564f82ca1962dc6095c3f146e28f4560b5b

  • SHA512

    e2f0fc68bea05129bdeeb8cefec41e5ac61ac7c68333bb2c63204c00fa90b3ca0cd690fe0795042f0a81728e9f1324b8eacb5985c9f04af8cfd74473befdf59f

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvA:8Q3LotOPNSQVwVVxGKEvKHrVA

Malware Config

Targets

    • Target

      63270bf50ff41e45c1009a505c2b9564f82ca1962dc6095c3f146e28f4560b5b

    • Size

      25KB

    • MD5

      3b55c46d207ca7b69e6e68a758152d38

    • SHA1

      b73602b83ad81ee88cb65322248a95b3fc1d0ff0

    • SHA256

      63270bf50ff41e45c1009a505c2b9564f82ca1962dc6095c3f146e28f4560b5b

    • SHA512

      e2f0fc68bea05129bdeeb8cefec41e5ac61ac7c68333bb2c63204c00fa90b3ca0cd690fe0795042f0a81728e9f1324b8eacb5985c9f04af8cfd74473befdf59f

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvA:8Q3LotOPNSQVwVVxGKEvKHrVA

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks