General

  • Target

    424fc96e379d35d667e74e5f3f84b93b

  • Size

    44KB

  • Sample

    240105-avvfyseeej

  • MD5

    424fc96e379d35d667e74e5f3f84b93b

  • SHA1

    314446039a9c832a877d9785a98a983f9441a032

  • SHA256

    204b632e1a2fab81f1ebd10a6301deb4d2e44b8fbe1eb168d24af2daf60e3563

  • SHA512

    c729856016a00a08e8c9665574259aa49decb398520b57931b8f093b0141c01c6816559b6e682d04cb4fbffef3c15dd7eced05d326ad58bb83c4823c444b9d15

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFERjkVK8oirRhPUGyc2j:SKcR4mjD9r823Fcir16xZcU3

Malware Config

Targets

    • Target

      424fc96e379d35d667e74e5f3f84b93b

    • Size

      44KB

    • MD5

      424fc96e379d35d667e74e5f3f84b93b

    • SHA1

      314446039a9c832a877d9785a98a983f9441a032

    • SHA256

      204b632e1a2fab81f1ebd10a6301deb4d2e44b8fbe1eb168d24af2daf60e3563

    • SHA512

      c729856016a00a08e8c9665574259aa49decb398520b57931b8f093b0141c01c6816559b6e682d04cb4fbffef3c15dd7eced05d326ad58bb83c4823c444b9d15

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFERjkVK8oirRhPUGyc2j:SKcR4mjD9r823Fcir16xZcU3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks