General

  • Target

    2133f316e03acc5ebc678a525c9f2bdd

  • Size

    261KB

  • Sample

    231231-agtx9sbhcq

  • MD5

    2133f316e03acc5ebc678a525c9f2bdd

  • SHA1

    be43949a939dadfa663072793dad2a78e9ab012d

  • SHA256

    0fdefbccd79556a51e0a43e54f53dd506a08182f889a58d4391a59f6aced4895

  • SHA512

    d48ddd5328f3f683c29e98284d09cbfac7e3df44f63f5f9be2552e343b0126d1561450b1baa819bed79ead7352fc41513f5daa032b9ca63aff754f009463287f

  • SSDEEP

    6144:hGy1ia1ABJAKJQF0cH+gyUkj3kmQAb4grSRx7vcTHw/yN:h71TYJeF02yRj33bFGTviHw/yN

Malware Config

Targets

    • Target

      2133f316e03acc5ebc678a525c9f2bdd

    • Size

      261KB

    • MD5

      2133f316e03acc5ebc678a525c9f2bdd

    • SHA1

      be43949a939dadfa663072793dad2a78e9ab012d

    • SHA256

      0fdefbccd79556a51e0a43e54f53dd506a08182f889a58d4391a59f6aced4895

    • SHA512

      d48ddd5328f3f683c29e98284d09cbfac7e3df44f63f5f9be2552e343b0126d1561450b1baa819bed79ead7352fc41513f5daa032b9ca63aff754f009463287f

    • SSDEEP

      6144:hGy1ia1ABJAKJQF0cH+gyUkj3kmQAb4grSRx7vcTHw/yN:h71TYJeF02yRj33bFGTviHw/yN

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks