General

  • Target

    ad4379e5483dd9be52fb4dc242ea6028

  • Size

    3.1MB

  • Sample

    240229-a2rzeahe32

  • MD5

    ad4379e5483dd9be52fb4dc242ea6028

  • SHA1

    bf2c768c6d1941348913f76b2a522eb14e1c54bf

  • SHA256

    194cc990c3189422d3e2c6148b5c73b04a97d8b7eb61080071850e98dccd2c29

  • SHA512

    3b9f7a1ba63536691b9c8ad0171c45cdf9e82f638a06285025621dba4e7abd050eefc77396d1000e3e2eecbe9eb2840fc99d0abf91642b0a98f3d03d0554e6d3

  • SSDEEP

    49152:DVsEc8MNFLljH4zmDta4BEp6PbtL2tLlmUi6AjW/MUSdGRf3/:DVsEcACWpIV2V2jxAZ

Malware Config

Targets

    • Target

      ad4379e5483dd9be52fb4dc242ea6028

    • Size

      3.1MB

    • MD5

      ad4379e5483dd9be52fb4dc242ea6028

    • SHA1

      bf2c768c6d1941348913f76b2a522eb14e1c54bf

    • SHA256

      194cc990c3189422d3e2c6148b5c73b04a97d8b7eb61080071850e98dccd2c29

    • SHA512

      3b9f7a1ba63536691b9c8ad0171c45cdf9e82f638a06285025621dba4e7abd050eefc77396d1000e3e2eecbe9eb2840fc99d0abf91642b0a98f3d03d0554e6d3

    • SSDEEP

      49152:DVsEc8MNFLljH4zmDta4BEp6PbtL2tLlmUi6AjW/MUSdGRf3/:DVsEcACWpIV2V2jxAZ

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks