General

  • Target

    99d660a708beb72b6a79b6209b5b460b

  • Size

    123KB

  • Sample

    240213-w5c6bafb2t

  • MD5

    99d660a708beb72b6a79b6209b5b460b

  • SHA1

    24da2360ad87877e945c65337903399d31198574

  • SHA256

    a8d59045c238a47815b64fb320d9b914166d6f5fac3afc104d9896c0bd17ecba

  • SHA512

    b94880a1700afe10005e97df5e7eb45ba66a39f6dcbf1e54a786cb81ccc23b4fa7a209a0ed133aa097874b62b03fb60806240149f73505ca95c5e78915e313e3

  • SSDEEP

    3072:SKcWmjRrz3ZKcWmjRrz3EN+tZl6AX9DgUmOTsqVa2mcMQ:hGyGEwzXSmlL

Malware Config

Targets

    • Target

      99d660a708beb72b6a79b6209b5b460b

    • Size

      123KB

    • MD5

      99d660a708beb72b6a79b6209b5b460b

    • SHA1

      24da2360ad87877e945c65337903399d31198574

    • SHA256

      a8d59045c238a47815b64fb320d9b914166d6f5fac3afc104d9896c0bd17ecba

    • SHA512

      b94880a1700afe10005e97df5e7eb45ba66a39f6dcbf1e54a786cb81ccc23b4fa7a209a0ed133aa097874b62b03fb60806240149f73505ca95c5e78915e313e3

    • SSDEEP

      3072:SKcWmjRrz3ZKcWmjRrz3EN+tZl6AX9DgUmOTsqVa2mcMQ:hGyGEwzXSmlL

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks