General

  • Target

    993a491d0a6ade56021be52ae5ddcde52daeeb009389e5820e410ba3d173abfa

  • Size

    71KB

  • Sample

    240407-3p1p1aac47

  • MD5

    2760418b3432067c2872bf64d585606b

  • SHA1

    23daab32a709c6bae525ba09c8f526934fc71c34

  • SHA256

    993a491d0a6ade56021be52ae5ddcde52daeeb009389e5820e410ba3d173abfa

  • SHA512

    6e76e65b2aac5c6d67135e118950650c73c043990455d2c79790d7178876ba9ea4af55cd5b25aface157d9beb0ae002cf83820e12035c29fdc06bb2b2cafc69d

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTX:ZhpAyazIlyazTX

Malware Config

Targets

    • Target

      993a491d0a6ade56021be52ae5ddcde52daeeb009389e5820e410ba3d173abfa

    • Size

      71KB

    • MD5

      2760418b3432067c2872bf64d585606b

    • SHA1

      23daab32a709c6bae525ba09c8f526934fc71c34

    • SHA256

      993a491d0a6ade56021be52ae5ddcde52daeeb009389e5820e410ba3d173abfa

    • SHA512

      6e76e65b2aac5c6d67135e118950650c73c043990455d2c79790d7178876ba9ea4af55cd5b25aface157d9beb0ae002cf83820e12035c29fdc06bb2b2cafc69d

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTX:ZhpAyazIlyazTX

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks