General

  • Target

    2e3318f4afba624d194128204c9d94b7922f8610bcfd87f38b47e29ab0e8f3a7

  • Size

    231KB

  • Sample

    240403-ykgdcabc99

  • MD5

    2f61f5d0039a03e985c1fad277b0f59b

  • SHA1

    62ac12d42918203d86dcca6a70d75be6795aa92b

  • SHA256

    2e3318f4afba624d194128204c9d94b7922f8610bcfd87f38b47e29ab0e8f3a7

  • SHA512

    76478f120635ec9aba616c88384329f5359e2ad7ed972c663b0f25fed5260fe7b3aefafcd997e0bc68ab45596ee0bbac5410a0e54cf2b4796698908a4e2d51fa

  • SSDEEP

    6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xq:Zv1nWdQP1EDhZPxq

Malware Config

Targets

    • Target

      2e3318f4afba624d194128204c9d94b7922f8610bcfd87f38b47e29ab0e8f3a7

    • Size

      231KB

    • MD5

      2f61f5d0039a03e985c1fad277b0f59b

    • SHA1

      62ac12d42918203d86dcca6a70d75be6795aa92b

    • SHA256

      2e3318f4afba624d194128204c9d94b7922f8610bcfd87f38b47e29ab0e8f3a7

    • SHA512

      76478f120635ec9aba616c88384329f5359e2ad7ed972c663b0f25fed5260fe7b3aefafcd997e0bc68ab45596ee0bbac5410a0e54cf2b4796698908a4e2d51fa

    • SSDEEP

      6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xq:Zv1nWdQP1EDhZPxq

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks