General

  • Target

    1ad18b1499a5394ea400a9177b602351

  • Size

    996KB

  • Sample

    231230-rbcv8sgba7

  • MD5

    1ad18b1499a5394ea400a9177b602351

  • SHA1

    7a09d64a68de1e586e1781594b2940a1ad746a91

  • SHA256

    3bfcd2a9aa544418e9e5ee0613b9c49b1c6ab5966fab1e571fe1fcf40b28f5a6

  • SHA512

    554a4f87c3501dc90fc956ecd38955ad7db6b948a08db3cb447289851366e05c36c9a1cc50982bd95967cba4e83f309588d728fcb6c286a4135765a731ae8511

  • SSDEEP

    24576:UJuo5sjkZczo63M87oYbJd5A8uvKovKSHPf4xVv5X:UfsloTYBbSDvKovKSvgxVvl

Malware Config

Targets

    • Target

      1ad18b1499a5394ea400a9177b602351

    • Size

      996KB

    • MD5

      1ad18b1499a5394ea400a9177b602351

    • SHA1

      7a09d64a68de1e586e1781594b2940a1ad746a91

    • SHA256

      3bfcd2a9aa544418e9e5ee0613b9c49b1c6ab5966fab1e571fe1fcf40b28f5a6

    • SHA512

      554a4f87c3501dc90fc956ecd38955ad7db6b948a08db3cb447289851366e05c36c9a1cc50982bd95967cba4e83f309588d728fcb6c286a4135765a731ae8511

    • SSDEEP

      24576:UJuo5sjkZczo63M87oYbJd5A8uvKovKSHPf4xVv5X:UfsloTYBbSDvKovKSvgxVvl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks