General

  • Target

    c58afa4ef0a123df747f6bad816a4aca

  • Size

    4.1MB

  • Sample

    240313-lmrkwaaa9w

  • MD5

    c58afa4ef0a123df747f6bad816a4aca

  • SHA1

    baead856b7fc625fc21aa6c9b88b67ae004e513f

  • SHA256

    1e3766bfe4e2e20d6e601bddcf34a05a25f8f18d446856bd03c9ddd6a70bdc0b

  • SHA512

    1bc5d70385862f6df35a0a7ceae3a290c28e95b3b72e5b87942009f231f5692e99cef6b39033d496af198c43e5ae468748e3a06b890b87f0b1aed7218eff5994

  • SSDEEP

    98304:7c9IW1dXgfC/MHmgCzjxAZAc9IW1dXgfC/MHmgCzjxAZ:Ga

Malware Config

Targets

    • Target

      c58afa4ef0a123df747f6bad816a4aca

    • Size

      4.1MB

    • MD5

      c58afa4ef0a123df747f6bad816a4aca

    • SHA1

      baead856b7fc625fc21aa6c9b88b67ae004e513f

    • SHA256

      1e3766bfe4e2e20d6e601bddcf34a05a25f8f18d446856bd03c9ddd6a70bdc0b

    • SHA512

      1bc5d70385862f6df35a0a7ceae3a290c28e95b3b72e5b87942009f231f5692e99cef6b39033d496af198c43e5ae468748e3a06b890b87f0b1aed7218eff5994

    • SSDEEP

      98304:7c9IW1dXgfC/MHmgCzjxAZAc9IW1dXgfC/MHmgCzjxAZ:Ga

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks