General

  • Target

    795b658d0b24ee576ffcaecfca6e0e7d

  • Size

    170KB

  • Sample

    240127-fvyfhadhc7

  • MD5

    795b658d0b24ee576ffcaecfca6e0e7d

  • SHA1

    b546d3c58eb6a3a9ca82ed18d3969706474934a1

  • SHA256

    7f5db97c477e0feb45031d61b6cb1a54da2e38afe6228db68ff0363445da8b55

  • SHA512

    4d4f8d95bd6a4fea71e761b8306d7fbd9f47f3c0d6f3a682ca52be047ecca62cf7910d41f2e29784575c5035ada0713261f4adbb935afb2029821271efe660e5

  • SSDEEP

    3072:DfLLXNjFCwEAHNcwNbBCcPcI3ZdlF1LS5aFZ0q4PMiXL8sUDIgqhloQt:bX9B1EAHawNlNp3/v1WMUtkiUW

Malware Config

Targets

    • Target

      795b658d0b24ee576ffcaecfca6e0e7d

    • Size

      170KB

    • MD5

      795b658d0b24ee576ffcaecfca6e0e7d

    • SHA1

      b546d3c58eb6a3a9ca82ed18d3969706474934a1

    • SHA256

      7f5db97c477e0feb45031d61b6cb1a54da2e38afe6228db68ff0363445da8b55

    • SHA512

      4d4f8d95bd6a4fea71e761b8306d7fbd9f47f3c0d6f3a682ca52be047ecca62cf7910d41f2e29784575c5035ada0713261f4adbb935afb2029821271efe660e5

    • SSDEEP

      3072:DfLLXNjFCwEAHNcwNbBCcPcI3ZdlF1LS5aFZ0q4PMiXL8sUDIgqhloQt:bX9B1EAHawNlNp3/v1WMUtkiUW

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks