General

  • Target

    16351e440f78bad36609ad6e3f0da93d8a5235d58242a433a691cedd81bb0faf

  • Size

    26KB

  • Sample

    231014-d7d7aaga83

  • MD5

    438d35d21c207b0a5c05e6911b4292a0

  • SHA1

    0af158cf025f09f43cb60bc3694d6a4f7dcc1096

  • SHA256

    16351e440f78bad36609ad6e3f0da93d8a5235d58242a433a691cedd81bb0faf

  • SHA512

    7350d08877d4abe429c5cb945918bf27a2a47ada5598db87311e697aab0a8d83dd06643411cb42997d617e623dc622415c61d472640d0bbd4c7e941aa7674a7f

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvZRapo:8Q3LotOPNSQVwVVxGKEvKHrVZwq

Malware Config

Targets

    • Target

      16351e440f78bad36609ad6e3f0da93d8a5235d58242a433a691cedd81bb0faf

    • Size

      26KB

    • MD5

      438d35d21c207b0a5c05e6911b4292a0

    • SHA1

      0af158cf025f09f43cb60bc3694d6a4f7dcc1096

    • SHA256

      16351e440f78bad36609ad6e3f0da93d8a5235d58242a433a691cedd81bb0faf

    • SHA512

      7350d08877d4abe429c5cb945918bf27a2a47ada5598db87311e697aab0a8d83dd06643411cb42997d617e623dc622415c61d472640d0bbd4c7e941aa7674a7f

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvZRapo:8Q3LotOPNSQVwVVxGKEvKHrVZwq

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks