General

  • Target

    33993bfe489594578be3532f951eb564

  • Size

    1.0MB

  • Sample

    231225-wtsrmacfd5

  • MD5

    33993bfe489594578be3532f951eb564

  • SHA1

    998fc3f25b4baf8b6a787a9352f3c25dd568c5bd

  • SHA256

    4c3e9c1e2383997e440f74c16da14007f779e764a4dbabaafe724dafcc744db6

  • SHA512

    f0d56077afdd39bbf2eb48b872c47186c178e3ce5a3e3f6ed2e90bf339e2d924b56b1a5276960894d4c21893974938829afd0795ea74de71d59f4a01d3655b5d

  • SSDEEP

    24576:EpgYepsjkZczo6EM87o9bJd5A8uvKGvKsQICP8bPq4KLwFO:EptisloqYCbSDvKGvKsQveXWw4

Malware Config

Targets

    • Target

      33993bfe489594578be3532f951eb564

    • Size

      1.0MB

    • MD5

      33993bfe489594578be3532f951eb564

    • SHA1

      998fc3f25b4baf8b6a787a9352f3c25dd568c5bd

    • SHA256

      4c3e9c1e2383997e440f74c16da14007f779e764a4dbabaafe724dafcc744db6

    • SHA512

      f0d56077afdd39bbf2eb48b872c47186c178e3ce5a3e3f6ed2e90bf339e2d924b56b1a5276960894d4c21893974938829afd0795ea74de71d59f4a01d3655b5d

    • SSDEEP

      24576:EpgYepsjkZczo6EM87o9bJd5A8uvKGvKsQICP8bPq4KLwFO:EptisloqYCbSDvKGvKsQveXWw4

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks