General

  • Target

    b8f344433c52c889eb6c015ab43edf19

  • Size

    71KB

  • Sample

    240307-rrxkksec4s

  • MD5

    b8f344433c52c889eb6c015ab43edf19

  • SHA1

    4354c5982917e3cd540e33019594c3e1bf646057

  • SHA256

    39813573816a5a6c8cdf4abad8d18d7d852b905f0271b3d7fbc67c04a20e2359

  • SHA512

    54522d06b3b2a2c4be113a825a76de12e131d5a98f8b1f670d287809f64ac6a9ee5496c7484ac87912f0b67ff0953aef6fa696ab683a6cc73d77327052003544

  • SSDEEP

    1536:s9Z3KcR4mjD9r8226+v9Z3KcR4mjD9r8226+3:sr3KcWmjRrzSvr3KcWmjRrzS3

Malware Config

Targets

    • Target

      b8f344433c52c889eb6c015ab43edf19

    • Size

      71KB

    • MD5

      b8f344433c52c889eb6c015ab43edf19

    • SHA1

      4354c5982917e3cd540e33019594c3e1bf646057

    • SHA256

      39813573816a5a6c8cdf4abad8d18d7d852b905f0271b3d7fbc67c04a20e2359

    • SHA512

      54522d06b3b2a2c4be113a825a76de12e131d5a98f8b1f670d287809f64ac6a9ee5496c7484ac87912f0b67ff0953aef6fa696ab683a6cc73d77327052003544

    • SSDEEP

      1536:s9Z3KcR4mjD9r8226+v9Z3KcR4mjD9r8226+3:sr3KcWmjRrzSvr3KcWmjRrzS3

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks