General

  • Target

    aca7d7357a22a5e7f8cab8b3a398e056

  • Size

    1.7MB

  • Sample

    240228-x3pl1abh77

  • MD5

    aca7d7357a22a5e7f8cab8b3a398e056

  • SHA1

    d98b8e0ec87043bd9e423abf6ea8bac99b300d1b

  • SHA256

    9d935fb933d0f53cd0ec8611756f1de148ba8624c2636be65432d34a1ea4e854

  • SHA512

    b3980ccdf5dfb0bfef164d03ab5687d16e1c245fe97483d4f38c422e60f3ceef8d93fe7a3e78d48386397a484b6f090c7c22901136aaef48337786c6434d1ea2

  • SSDEEP

    24576:qCJP3MZE6Ehg7mM+M6RkMkIM7gE6Eh67d/HEp6uu:U0g7mM+M6RkMkIM7I067pEp6

Malware Config

Targets

    • Target

      aca7d7357a22a5e7f8cab8b3a398e056

    • Size

      1.7MB

    • MD5

      aca7d7357a22a5e7f8cab8b3a398e056

    • SHA1

      d98b8e0ec87043bd9e423abf6ea8bac99b300d1b

    • SHA256

      9d935fb933d0f53cd0ec8611756f1de148ba8624c2636be65432d34a1ea4e854

    • SHA512

      b3980ccdf5dfb0bfef164d03ab5687d16e1c245fe97483d4f38c422e60f3ceef8d93fe7a3e78d48386397a484b6f090c7c22901136aaef48337786c6434d1ea2

    • SSDEEP

      24576:qCJP3MZE6Ehg7mM+M6RkMkIM7gE6Eh67d/HEp6uu:U0g7mM+M6RkMkIM7I067pEp6

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks