General

  • Target

    1a7892806c68dc27d6fc935ba056475e

  • Size

    59KB

  • Sample

    231230-q2542aebh8

  • MD5

    1a7892806c68dc27d6fc935ba056475e

  • SHA1

    270c8733082034c386a918d1b4112218fc147ab3

  • SHA256

    dfb3072c0a72d4db958183d228b9639b613b0f369c9dba577be584b4662ad456

  • SHA512

    4c513ad2c23a02a2483377e39746bd086d90ab4c7f26a181ef8c0b3006c03dcaaad1ee2ee18ae892ac4d90041212ca995dd996ef773c07a0c2e3f6d27d942af3

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z39:SKcR4mjD9r823FHKcR4mjD9r823FM

Malware Config

Targets

    • Target

      1a7892806c68dc27d6fc935ba056475e

    • Size

      59KB

    • MD5

      1a7892806c68dc27d6fc935ba056475e

    • SHA1

      270c8733082034c386a918d1b4112218fc147ab3

    • SHA256

      dfb3072c0a72d4db958183d228b9639b613b0f369c9dba577be584b4662ad456

    • SHA512

      4c513ad2c23a02a2483377e39746bd086d90ab4c7f26a181ef8c0b3006c03dcaaad1ee2ee18ae892ac4d90041212ca995dd996ef773c07a0c2e3f6d27d942af3

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z39:SKcR4mjD9r823FHKcR4mjD9r823FM

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks