General

  • Target

    2024-01-27_2c17180e563754924088d787c3d749f3_mafia

  • Size

    1.4MB

  • Sample

    240127-mgv7jscaaj

  • MD5

    2c17180e563754924088d787c3d749f3

  • SHA1

    e37f0ff908e3a740b4af61c058f73858cbd2bed8

  • SHA256

    cfb230be8cace9576b63099b4d0212dcb636a736eb4cfe88f66261aadca2d541

  • SHA512

    3b62ba433b8196272ace2d9e99da566382f7ba69cbc86cff950b7b67f6708f5b67ce6f5dae690dfd1760b0ef23d070116c7a601703533e8ea03beecad92250e2

  • SSDEEP

    24576:VKVGgkEltbjzWDwCmTPPk/z5Zf5hz0dNUX:VKkg/SDwCmTPc/lZfuN4

Malware Config

Targets

    • Target

      2024-01-27_2c17180e563754924088d787c3d749f3_mafia

    • Size

      1.4MB

    • MD5

      2c17180e563754924088d787c3d749f3

    • SHA1

      e37f0ff908e3a740b4af61c058f73858cbd2bed8

    • SHA256

      cfb230be8cace9576b63099b4d0212dcb636a736eb4cfe88f66261aadca2d541

    • SHA512

      3b62ba433b8196272ace2d9e99da566382f7ba69cbc86cff950b7b67f6708f5b67ce6f5dae690dfd1760b0ef23d070116c7a601703533e8ea03beecad92250e2

    • SSDEEP

      24576:VKVGgkEltbjzWDwCmTPPk/z5Zf5hz0dNUX:VKkg/SDwCmTPc/lZfuN4

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks