General

  • Target

    774cdbe22080e3f26c1c3c999aa9efeb

  • Size

    281KB

  • Sample

    240126-n6hs7aeecp

  • MD5

    774cdbe22080e3f26c1c3c999aa9efeb

  • SHA1

    b030e3954a9b18672224a67700b75f4c87a4d36a

  • SHA256

    7746a21ed430db583c495ab631cb7bf30b1ddfe97949802134ddba93518363a7

  • SHA512

    d967538c86ca21a0bb508191e9d1bb4ecd3894c1217041e4d5dc6bb65d03f019484ac69e54cb45906a4195e727651ee38a911a6015d08dad994f43d96dde1b9d

  • SSDEEP

    6144:hGyGrtpCQMmcOY0AvQnlTDyQWbXi1SuFsGk:h3/LmfYgRd+MSu6

Malware Config

Targets

    • Target

      774cdbe22080e3f26c1c3c999aa9efeb

    • Size

      281KB

    • MD5

      774cdbe22080e3f26c1c3c999aa9efeb

    • SHA1

      b030e3954a9b18672224a67700b75f4c87a4d36a

    • SHA256

      7746a21ed430db583c495ab631cb7bf30b1ddfe97949802134ddba93518363a7

    • SHA512

      d967538c86ca21a0bb508191e9d1bb4ecd3894c1217041e4d5dc6bb65d03f019484ac69e54cb45906a4195e727651ee38a911a6015d08dad994f43d96dde1b9d

    • SSDEEP

      6144:hGyGrtpCQMmcOY0AvQnlTDyQWbXi1SuFsGk:h3/LmfYgRd+MSu6

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks