General

  • Target

    417ac64ea38dc0f0a4465f7ef9bc4297

  • Size

    30KB

  • Sample

    240104-v2ghwsfgck

  • MD5

    417ac64ea38dc0f0a4465f7ef9bc4297

  • SHA1

    3a81d569a217ab89de9bcc626668a32460f538f9

  • SHA256

    dd87549655388442105d3e28986eba5570caf59297131c529debb182aec1248c

  • SHA512

    3e83eb8c7a691bb0184a3ef1f42afb767ff4ea9e7959d0a009b6150e6ff6269153a942953942dae1162e29fae28eb125209c14ab5e15856f3bed8a2d86e797fe

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFQC:SKcR4mjD9r823FQC

Malware Config

Targets

    • Target

      417ac64ea38dc0f0a4465f7ef9bc4297

    • Size

      30KB

    • MD5

      417ac64ea38dc0f0a4465f7ef9bc4297

    • SHA1

      3a81d569a217ab89de9bcc626668a32460f538f9

    • SHA256

      dd87549655388442105d3e28986eba5570caf59297131c529debb182aec1248c

    • SHA512

      3e83eb8c7a691bb0184a3ef1f42afb767ff4ea9e7959d0a009b6150e6ff6269153a942953942dae1162e29fae28eb125209c14ab5e15856f3bed8a2d86e797fe

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFQC:SKcR4mjD9r823FQC

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks