General

  • Target

    69ad94630f3e0bf328ddee4b54e3f057

  • Size

    100KB

  • Sample

    240120-gtpyeachfq

  • MD5

    69ad94630f3e0bf328ddee4b54e3f057

  • SHA1

    f52288dc5df0e42091a7ae7ea71564ce03ea0607

  • SHA256

    2bd1cc1d9e1483c9d476331be8457cdef8cb445f8d20830fe299403e1233bb54

  • SHA512

    59311a90b6cf057d8e7eebda421614c23f404347f346f78055aa6c0e15d97053cdbea550dbea090a99d931dc83800f6a32c5a6fe9a87020210d290e4386f18c7

  • SSDEEP

    1536:mJv5McKmdnrc4TXN/x1vZD8ql6GrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNF6+E5B/M2O0OgF

Malware Config

Targets

    • Target

      69ad94630f3e0bf328ddee4b54e3f057

    • Size

      100KB

    • MD5

      69ad94630f3e0bf328ddee4b54e3f057

    • SHA1

      f52288dc5df0e42091a7ae7ea71564ce03ea0607

    • SHA256

      2bd1cc1d9e1483c9d476331be8457cdef8cb445f8d20830fe299403e1233bb54

    • SHA512

      59311a90b6cf057d8e7eebda421614c23f404347f346f78055aa6c0e15d97053cdbea550dbea090a99d931dc83800f6a32c5a6fe9a87020210d290e4386f18c7

    • SSDEEP

      1536:mJv5McKmdnrc4TXN/x1vZD8ql6GrUZ5Bx5MlD7wOHUN4ZKNJf:mJeunoMXNF6+E5B/M2O0OgF

    • Poullight

      Poullight is an information stealer first seen in March 2020.

    • Poullight Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks