General

  • Target

    9f6224a5f577616137867ca5915d1231833c98fd1b71f5cb7a43874796e59e81

  • Size

    71KB

  • Sample

    240407-3y76faad3s

  • MD5

    1f0d8cfb265fa617d65b66f132f636bb

  • SHA1

    b4fd23eb14319c1da60066d05a5144431f263c5e

  • SHA256

    9f6224a5f577616137867ca5915d1231833c98fd1b71f5cb7a43874796e59e81

  • SHA512

    899879107e863cf76935adec9bbe74aa14717de18086f0f4c19f368abbf794aa978bc434265a9256d32dafb4591d1b9e4f73243b2d063893c28030996d9a2538

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP

Malware Config

Targets

    • Target

      9f6224a5f577616137867ca5915d1231833c98fd1b71f5cb7a43874796e59e81

    • Size

      71KB

    • MD5

      1f0d8cfb265fa617d65b66f132f636bb

    • SHA1

      b4fd23eb14319c1da60066d05a5144431f263c5e

    • SHA256

      9f6224a5f577616137867ca5915d1231833c98fd1b71f5cb7a43874796e59e81

    • SHA512

      899879107e863cf76935adec9bbe74aa14717de18086f0f4c19f368abbf794aa978bc434265a9256d32dafb4591d1b9e4f73243b2d063893c28030996d9a2538

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks