General

  • Target

    cf6a011cab80d671e4f7c3b9d631d5a6acdb974512339115ebe1295de6089f4f

  • Size

    1.8MB

  • Sample

    231031-pqhc6aaa37

  • MD5

    702925aee1a4d35f7a780d41d1e6c3cf

  • SHA1

    4ed597a89f89081d4f3fd70447a52420dc5fe4c9

  • SHA256

    cf6a011cab80d671e4f7c3b9d631d5a6acdb974512339115ebe1295de6089f4f

  • SHA512

    91edd4b1776ed87e6c6d5b5950db5c6d8768a6d16b5a8cf8a2ce6d39c9611b2a3230287b7fbef0b195ef9414cee31c3b5493be00875055cde099b4a3b5fdcc48

  • SSDEEP

    49152:MKJ0WR7AFPyyiSruXKpk3WFDL9zxnSpxlMPdlR8v4UC0Eg6ET7M/I:MKlBAFPydSS6W6X9lnWl2/V0cETQ/I

Score
7/10

Malware Config

Targets

    • Target

      cf6a011cab80d671e4f7c3b9d631d5a6acdb974512339115ebe1295de6089f4f

    • Size

      1.8MB

    • MD5

      702925aee1a4d35f7a780d41d1e6c3cf

    • SHA1

      4ed597a89f89081d4f3fd70447a52420dc5fe4c9

    • SHA256

      cf6a011cab80d671e4f7c3b9d631d5a6acdb974512339115ebe1295de6089f4f

    • SHA512

      91edd4b1776ed87e6c6d5b5950db5c6d8768a6d16b5a8cf8a2ce6d39c9611b2a3230287b7fbef0b195ef9414cee31c3b5493be00875055cde099b4a3b5fdcc48

    • SSDEEP

      49152:MKJ0WR7AFPyyiSruXKpk3WFDL9zxnSpxlMPdlR8v4UC0Eg6ET7M/I:MKlBAFPydSS6W6X9lnWl2/V0cETQ/I

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks