General

  • Target

    075b40db16f243dfa85396a91df410cb

  • Size

    164KB

  • Sample

    231225-fyxclsdgal

  • MD5

    075b40db16f243dfa85396a91df410cb

  • SHA1

    6aa5050dc3133a4d695f362a18c83df96aadbde8

  • SHA256

    568fee0c7ae0a9c47e4acceb668ca6136f1521e4a2f851cb0866a0188636980c

  • SHA512

    64922408e9355e35d29d01967c64ac59bb0583281d9075145305c55ade1b35157c7d77242b32670a99cf3d5f80df351cd4ee7995b17930a8c385f615a491c3cb

  • SSDEEP

    3072:NrsDzSaDAYUySqQgFQlKNyXsJHkfDQtoycF4K3VsmSSU6XOEvAe9:Nrza0YbSqfFyK0X9ESVsm9eV

Malware Config

Targets

    • Target

      075b40db16f243dfa85396a91df410cb

    • Size

      164KB

    • MD5

      075b40db16f243dfa85396a91df410cb

    • SHA1

      6aa5050dc3133a4d695f362a18c83df96aadbde8

    • SHA256

      568fee0c7ae0a9c47e4acceb668ca6136f1521e4a2f851cb0866a0188636980c

    • SHA512

      64922408e9355e35d29d01967c64ac59bb0583281d9075145305c55ade1b35157c7d77242b32670a99cf3d5f80df351cd4ee7995b17930a8c385f615a491c3cb

    • SSDEEP

      3072:NrsDzSaDAYUySqQgFQlKNyXsJHkfDQtoycF4K3VsmSSU6XOEvAe9:Nrza0YbSqfFyK0X9ESVsm9eV

    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks