General

  • Target

    be2514c2814e0168be1356b89c02a8c3_JC.exe

  • Size

    3.2MB

  • Sample

    231012-17vwcsfa82

  • MD5

    be2514c2814e0168be1356b89c02a8c3

  • SHA1

    c08b4fdaf8ce9415905d56408d99bdd9524bc642

  • SHA256

    2860b42101c1cbdce0964da650a2c0687dc1f72e519de0d665d2bb8bebae7071

  • SHA512

    2615b25ae92b6f9acfcbf2de3f4116bb29a69d0a106bb205fc2ecdae273af610da1754d3dc8c32f977e6b62ecbf4d751517fabd32efd4b498f9d4bfba7cf7076

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp9bVz8eLFcz

Malware Config

Targets

    • Target

      be2514c2814e0168be1356b89c02a8c3_JC.exe

    • Size

      3.2MB

    • MD5

      be2514c2814e0168be1356b89c02a8c3

    • SHA1

      c08b4fdaf8ce9415905d56408d99bdd9524bc642

    • SHA256

      2860b42101c1cbdce0964da650a2c0687dc1f72e519de0d665d2bb8bebae7071

    • SHA512

      2615b25ae92b6f9acfcbf2de3f4116bb29a69d0a106bb205fc2ecdae273af610da1754d3dc8c32f977e6b62ecbf4d751517fabd32efd4b498f9d4bfba7cf7076

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp9bVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks