General

  • Target

    87e5df4b2d1ad17687a506394018aeb8

  • Size

    100KB

  • Sample

    240201-21xxtaaddr

  • MD5

    87e5df4b2d1ad17687a506394018aeb8

  • SHA1

    bfd775b8fc73d85f4127eaa4c3fb91123c5c78ff

  • SHA256

    bb5f523d4b4d9a8bfb0f0e89eff3559d228451476467b7b193e7686031398d3d

  • SHA512

    b6c8d4f334d3dcee4b6380b332beb12574c35ac355211e2454dd1e91899d8de578804e1293239a5a5ca5d723b42ddf5455803dd292447f874fdde137934e65fa

  • SSDEEP

    1536:GJv5McKmdnrc4TXN1x1vZD8ql6GrUZ5Bx5M9D7wOHUN4ZKNJH:GJeunoMXNf6+E5B/MuO0Ogt

Malware Config

Targets

    • Target

      87e5df4b2d1ad17687a506394018aeb8

    • Size

      100KB

    • MD5

      87e5df4b2d1ad17687a506394018aeb8

    • SHA1

      bfd775b8fc73d85f4127eaa4c3fb91123c5c78ff

    • SHA256

      bb5f523d4b4d9a8bfb0f0e89eff3559d228451476467b7b193e7686031398d3d

    • SHA512

      b6c8d4f334d3dcee4b6380b332beb12574c35ac355211e2454dd1e91899d8de578804e1293239a5a5ca5d723b42ddf5455803dd292447f874fdde137934e65fa

    • SSDEEP

      1536:GJv5McKmdnrc4TXN1x1vZD8ql6GrUZ5Bx5M9D7wOHUN4ZKNJH:GJeunoMXNf6+E5B/MuO0Ogt

    • Poullight

      Poullight is an information stealer first seen in March 2020.

    • Poullight Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks