General

  • Target

    35c52acdb082d96c3e615274a77af260f1420a7a658d2f4eaf210fd9fdad86bc

  • Size

    141KB

  • Sample

    240407-xpgz1abf5z

  • MD5

    edc54d04bf15fc451bdf8fb323711eaa

  • SHA1

    fe93e9306ac23053b9b589be57c8429c70919892

  • SHA256

    35c52acdb082d96c3e615274a77af260f1420a7a658d2f4eaf210fd9fdad86bc

  • SHA512

    8e0a287e389025ece166fd92309c7ef1034fa7e9d665ccb36d4315e9d39829599004515617bb4959540203328e37920f72ab173a410ef3e6467282fb531576d8

  • SSDEEP

    3072:PVaY46tGNttyJQ7KR6sRYHKreCC0XUq2yiqzv6z4AXrB4APHCv:346tGdyrYHKreQ32hlBG

Score
8/10

Malware Config

Targets

    • Target

      35c52acdb082d96c3e615274a77af260f1420a7a658d2f4eaf210fd9fdad86bc

    • Size

      141KB

    • MD5

      edc54d04bf15fc451bdf8fb323711eaa

    • SHA1

      fe93e9306ac23053b9b589be57c8429c70919892

    • SHA256

      35c52acdb082d96c3e615274a77af260f1420a7a658d2f4eaf210fd9fdad86bc

    • SHA512

      8e0a287e389025ece166fd92309c7ef1034fa7e9d665ccb36d4315e9d39829599004515617bb4959540203328e37920f72ab173a410ef3e6467282fb531576d8

    • SSDEEP

      3072:PVaY46tGNttyJQ7KR6sRYHKreCC0XUq2yiqzv6z4AXrB4APHCv:346tGdyrYHKreQ32hlBG

    Score
    8/10
    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks