General

  • Target

    Konst.exe

  • Size

    15.3MB

  • Sample

    231201-k8ac2sgf4y

  • MD5

    cb031980eb0030f7096b5e097e841a87

  • SHA1

    7d1b8a56ed0fa8b367605ed3b909cbfe2f9f017d

  • SHA256

    15399042016065429443742d3638917dffec34e0ae6921d4b10ba9b5c2bf4353

  • SHA512

    a57ad511b35d84b598b4b221615cced0cfa2c8eeceb770d235f500ea4d5ffccc6fd670b246a19c38f0bd215f2eb9994b485027f1e453b96ad02d2e4c74cfc7e9

  • SSDEEP

    196608:usTThnGlMNmviSDpnol5grgEvAzR6X08FCncKyDwl7aUDwyrcvUNcID3U:/lncMNkiionogQTF4Rp1cvYcI

Malware Config

Targets

    • Target

      Konst.exe

    • Size

      15.3MB

    • MD5

      cb031980eb0030f7096b5e097e841a87

    • SHA1

      7d1b8a56ed0fa8b367605ed3b909cbfe2f9f017d

    • SHA256

      15399042016065429443742d3638917dffec34e0ae6921d4b10ba9b5c2bf4353

    • SHA512

      a57ad511b35d84b598b4b221615cced0cfa2c8eeceb770d235f500ea4d5ffccc6fd670b246a19c38f0bd215f2eb9994b485027f1e453b96ad02d2e4c74cfc7e9

    • SSDEEP

      196608:usTThnGlMNmviSDpnol5grgEvAzR6X08FCncKyDwl7aUDwyrcvUNcID3U:/lncMNkiionogQTF4Rp1cvYcI

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks