General

  • Target

    3a69308fc69a181472bba584c49bf276

  • Size

    185KB

  • Sample

    231231-tavqrshhdj

  • MD5

    3a69308fc69a181472bba584c49bf276

  • SHA1

    70a4c032225b763ded2b241934a02059599bbee5

  • SHA256

    b3b830308f3c2f3212d528ea6622c19769f8469d34d23939cdbc9c3548661d95

  • SHA512

    2b71c67e442d9dbbc0dbec213a9681f5198a2b708853b8a7b216357a8cbeb6c80fb1485056b4fe7605cef056796c0391f3b51e549b78caef112920e04e55b432

  • SSDEEP

    3072:T3YFRQ2tC/SGI2iF1F8uWLyTF0vPdN1tpt+AHW0qhPW8tI21EjLKREHci+siVv8T:r8RQ2t8S/x8ufR0vPdrtp9H3qoN21EjD

Malware Config

Targets

    • Target

      3a69308fc69a181472bba584c49bf276

    • Size

      185KB

    • MD5

      3a69308fc69a181472bba584c49bf276

    • SHA1

      70a4c032225b763ded2b241934a02059599bbee5

    • SHA256

      b3b830308f3c2f3212d528ea6622c19769f8469d34d23939cdbc9c3548661d95

    • SHA512

      2b71c67e442d9dbbc0dbec213a9681f5198a2b708853b8a7b216357a8cbeb6c80fb1485056b4fe7605cef056796c0391f3b51e549b78caef112920e04e55b432

    • SSDEEP

      3072:T3YFRQ2tC/SGI2iF1F8uWLyTF0vPdN1tpt+AHW0qhPW8tI21EjLKREHci+siVv8T:r8RQ2t8S/x8ufR0vPdrtp9H3qoN21EjD

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks