General

  • Target

    fdff54cc9058c5b8a8ed4ca33519a4c3934c812d2ae897681a9c4250febc5366

  • Size

    25KB

  • Sample

    231015-q86zxahd78

  • MD5

    6b0b1abef9b482cb5ce53c270e161686

  • SHA1

    bcea13cc6aad8f2d09f50773c5b5c03d0f79031c

  • SHA256

    fdff54cc9058c5b8a8ed4ca33519a4c3934c812d2ae897681a9c4250febc5366

  • SHA512

    428932e5b98c17c55b065c04225a15aec2b6a761e49645555d551c0fc7fff19326ad50f70cfdd9d26b32da441db1b8658697ac20b9498257352d3ed002611bd0

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvJU:8Q3LotOPNSQVwVVxGKEvKHrVJU

Malware Config

Targets

    • Target

      fdff54cc9058c5b8a8ed4ca33519a4c3934c812d2ae897681a9c4250febc5366

    • Size

      25KB

    • MD5

      6b0b1abef9b482cb5ce53c270e161686

    • SHA1

      bcea13cc6aad8f2d09f50773c5b5c03d0f79031c

    • SHA256

      fdff54cc9058c5b8a8ed4ca33519a4c3934c812d2ae897681a9c4250febc5366

    • SHA512

      428932e5b98c17c55b065c04225a15aec2b6a761e49645555d551c0fc7fff19326ad50f70cfdd9d26b32da441db1b8658697ac20b9498257352d3ed002611bd0

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvJU:8Q3LotOPNSQVwVVxGKEvKHrVJU

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks