General

  • Target

    b622be916b2cffb4a806e31a72363158

  • Size

    3.9MB

  • Sample

    240306-bjkm2sef7t

  • MD5

    b622be916b2cffb4a806e31a72363158

  • SHA1

    f137f19a150e030fe03949605e003ba30d945d3f

  • SHA256

    93f242a5aee6e5677fa39fbff0461cc356b7c0701763575bc197df4ba01811b9

  • SHA512

    b11664d755502c4f55d7fc89d3af00cdc1398f14f8d6b65cc78dae11e02c2177c05505185c65db30a8636fd8cc3fce89eeed7a808d614a90118b1e68cb20393b

  • SSDEEP

    49152:eu5HOTWTXu5HOTWT6ljX7nDtoZRfU4Uj33i3+c:dHoHw7GLfUbM9

Malware Config

Targets

    • Target

      b622be916b2cffb4a806e31a72363158

    • Size

      3.9MB

    • MD5

      b622be916b2cffb4a806e31a72363158

    • SHA1

      f137f19a150e030fe03949605e003ba30d945d3f

    • SHA256

      93f242a5aee6e5677fa39fbff0461cc356b7c0701763575bc197df4ba01811b9

    • SHA512

      b11664d755502c4f55d7fc89d3af00cdc1398f14f8d6b65cc78dae11e02c2177c05505185c65db30a8636fd8cc3fce89eeed7a808d614a90118b1e68cb20393b

    • SSDEEP

      49152:eu5HOTWTXu5HOTWT6ljX7nDtoZRfU4Uj33i3+c:dHoHw7GLfUbM9

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks