General

  • Target

    5e9cc1f58ed5064b532639777825b42ebd4fa97bea85f6f3844dafdcd5210b2e

  • Size

    26KB

  • Sample

    231013-3esawaeh9v

  • MD5

    709118f84053784f5b9fbaf84f6744be

  • SHA1

    3546c32b271630b2f73e4e84ffef7258d838b548

  • SHA256

    5e9cc1f58ed5064b532639777825b42ebd4fa97bea85f6f3844dafdcd5210b2e

  • SHA512

    9d9cb6c7ccdad88c17739998e66a72a92293d5d553a7d51033b875bf47de69a97a10af6540d91259649ef56a9ed714461e0c05d5add63beb2c18efaa99d98fab

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvcG+:8Q3LotOPNSQVwVVxGKEvKHrVG

Malware Config

Targets

    • Target

      5e9cc1f58ed5064b532639777825b42ebd4fa97bea85f6f3844dafdcd5210b2e

    • Size

      26KB

    • MD5

      709118f84053784f5b9fbaf84f6744be

    • SHA1

      3546c32b271630b2f73e4e84ffef7258d838b548

    • SHA256

      5e9cc1f58ed5064b532639777825b42ebd4fa97bea85f6f3844dafdcd5210b2e

    • SHA512

      9d9cb6c7ccdad88c17739998e66a72a92293d5d553a7d51033b875bf47de69a97a10af6540d91259649ef56a9ed714461e0c05d5add63beb2c18efaa99d98fab

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvcG+:8Q3LotOPNSQVwVVxGKEvKHrVG

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks