General

  • Target

    bcc0924bae1c73944071615964aadf08

  • Size

    3.2MB

  • Sample

    240309-zfa67sac6t

  • MD5

    bcc0924bae1c73944071615964aadf08

  • SHA1

    3929b9462b671446eb7c652594a0a49e33530a4b

  • SHA256

    dc2a2843958a9404887888259cec8ad899162c53f4a0dfacbaeb452f551cd180

  • SHA512

    c4647b91a5348cd4d902f259b40489e156ecdbd7689e61e008cbc4d84c90c59086fd860304ba792c3ee1065807f836441d92e706750bccb1215aa6651c30fa1b

  • SSDEEP

    24576:bSh3WRgI+4sSYXVav9MkqSI8LUlFl5Fp+:VgI+cv9MxcY/+

Malware Config

Targets

    • Target

      bcc0924bae1c73944071615964aadf08

    • Size

      3.2MB

    • MD5

      bcc0924bae1c73944071615964aadf08

    • SHA1

      3929b9462b671446eb7c652594a0a49e33530a4b

    • SHA256

      dc2a2843958a9404887888259cec8ad899162c53f4a0dfacbaeb452f551cd180

    • SHA512

      c4647b91a5348cd4d902f259b40489e156ecdbd7689e61e008cbc4d84c90c59086fd860304ba792c3ee1065807f836441d92e706750bccb1215aa6651c30fa1b

    • SSDEEP

      24576:bSh3WRgI+4sSYXVav9MkqSI8LUlFl5Fp+:VgI+cv9MxcY/+

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

MITRE ATT&CK Enterprise v15

Tasks