General

  • Target

    111f80d35e7e3aa8f62702c74028ab93

  • Size

    1.6MB

  • Sample

    231230-g94fqscgbr

  • MD5

    111f80d35e7e3aa8f62702c74028ab93

  • SHA1

    9d4ca403ef3b870f0e2c1a47d452006b30805011

  • SHA256

    4999d189e8fa9d732f35fd9b6c6ef5ccd3eb3725a8bb1cad3710090f0c240873

  • SHA512

    a32bb655ec39fec39e8fe28b23f5f112f9fd73f3f289f7d505efcfec8ba3b21db792f2051d3952140357cf72609358744aa06cd26d66feee4042163ef3c2bfa2

  • SSDEEP

    49152:o/fwUdeRW1s5ycjkcSZEDghtAkf4tJh8TNJrP:owUdf1GXj6BGt3c

Malware Config

Targets

    • Target

      111f80d35e7e3aa8f62702c74028ab93

    • Size

      1.6MB

    • MD5

      111f80d35e7e3aa8f62702c74028ab93

    • SHA1

      9d4ca403ef3b870f0e2c1a47d452006b30805011

    • SHA256

      4999d189e8fa9d732f35fd9b6c6ef5ccd3eb3725a8bb1cad3710090f0c240873

    • SHA512

      a32bb655ec39fec39e8fe28b23f5f112f9fd73f3f289f7d505efcfec8ba3b21db792f2051d3952140357cf72609358744aa06cd26d66feee4042163ef3c2bfa2

    • SSDEEP

      49152:o/fwUdeRW1s5ycjkcSZEDghtAkf4tJh8TNJrP:owUdf1GXj6BGt3c

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks