General

  • Target

    ab0093c8475fa411dd86016b2ba3573e647d53a021a6b850a95de56395a119be

  • Size

    25KB

  • Sample

    231029-w81e1saf47

  • MD5

    79d894525f1324f85c98e68b2fd3f474

  • SHA1

    5529ee0a058c054ac3ccc0e8126cf94c6f811681

  • SHA256

    ab0093c8475fa411dd86016b2ba3573e647d53a021a6b850a95de56395a119be

  • SHA512

    93ae3b133cddb77f567b1bafa1bbdd08d7109d7cb560804fbb6ac35df2c43976e368dfa210b61cdc7b039947c79ccc593861d517d89a7abe4909cd6bac4f889c

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvFlK/:8Q3LotOPNSQVwVVxGKEvKHrVFg

Malware Config

Targets

    • Target

      ab0093c8475fa411dd86016b2ba3573e647d53a021a6b850a95de56395a119be

    • Size

      25KB

    • MD5

      79d894525f1324f85c98e68b2fd3f474

    • SHA1

      5529ee0a058c054ac3ccc0e8126cf94c6f811681

    • SHA256

      ab0093c8475fa411dd86016b2ba3573e647d53a021a6b850a95de56395a119be

    • SHA512

      93ae3b133cddb77f567b1bafa1bbdd08d7109d7cb560804fbb6ac35df2c43976e368dfa210b61cdc7b039947c79ccc593861d517d89a7abe4909cd6bac4f889c

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvFlK/:8Q3LotOPNSQVwVVxGKEvKHrVFg

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks