General

  • Target

    9d51d0f126bd8321faf7d49fea9ae2ac43d5142d84f8c5f57768f8c5c7aadf2f

  • Size

    25KB

  • Sample

    231013-e3qj7adh9z

  • MD5

    71a830008348473c4c8064b6c2a4edf8

  • SHA1

    ab01963855aed0e6d1a28b8ceba198d767ec12c7

  • SHA256

    9d51d0f126bd8321faf7d49fea9ae2ac43d5142d84f8c5f57768f8c5c7aadf2f

  • SHA512

    50361cd377d92528a2baf0ab23ce9358651ef9c7637585d57b9e59d704c23202dfab449439f58654c8427ab4786318c7bde85f6e5faa81887483e8d98da0e6d5

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvB59:8Q3LotOPNSQVwVVxGKEvKHrVB59

Malware Config

Targets

    • Target

      9d51d0f126bd8321faf7d49fea9ae2ac43d5142d84f8c5f57768f8c5c7aadf2f

    • Size

      25KB

    • MD5

      71a830008348473c4c8064b6c2a4edf8

    • SHA1

      ab01963855aed0e6d1a28b8ceba198d767ec12c7

    • SHA256

      9d51d0f126bd8321faf7d49fea9ae2ac43d5142d84f8c5f57768f8c5c7aadf2f

    • SHA512

      50361cd377d92528a2baf0ab23ce9358651ef9c7637585d57b9e59d704c23202dfab449439f58654c8427ab4786318c7bde85f6e5faa81887483e8d98da0e6d5

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvB59:8Q3LotOPNSQVwVVxGKEvKHrVB59

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks