General

  • Target

    NEAS.2023-09-29_75576f85946e7e9cfdd6d1a06831f834_mafia.exe

  • Size

    1.4MB

  • Sample

    231106-zmywvage32

  • MD5

    75576f85946e7e9cfdd6d1a06831f834

  • SHA1

    fd5bb03dec8ac7800a4f88595becb3057f64d4c5

  • SHA256

    401113544290dfc3b59f6dddc63a89f348e4071b0b1462dcfb21a0d4af81a69e

  • SHA512

    a80a4ad8c0b6d70e4965bca4a7d1ad610bbe4084fb071ad835bba47faf85a5e0abe370794af85e4fbcf0086400b0d0d8e0f7591192833f4f94ca544aa1d281bb

  • SSDEEP

    12288:bLC/r4vuHzCFJJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:b2/r48zC3voKFLgYHJWwl24C15rDY

Score
7/10

Malware Config

Targets

    • Target

      NEAS.2023-09-29_75576f85946e7e9cfdd6d1a06831f834_mafia.exe

    • Size

      1.4MB

    • MD5

      75576f85946e7e9cfdd6d1a06831f834

    • SHA1

      fd5bb03dec8ac7800a4f88595becb3057f64d4c5

    • SHA256

      401113544290dfc3b59f6dddc63a89f348e4071b0b1462dcfb21a0d4af81a69e

    • SHA512

      a80a4ad8c0b6d70e4965bca4a7d1ad610bbe4084fb071ad835bba47faf85a5e0abe370794af85e4fbcf0086400b0d0d8e0f7591192833f4f94ca544aa1d281bb

    • SSDEEP

      12288:bLC/r4vuHzCFJJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:b2/r48zC3voKFLgYHJWwl24C15rDY

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks