General

  • Target

    0de517bdb20ebd584c93685035efe1917c684630347ee8cab9362c8577774385

  • Size

    577KB

  • Sample

    240407-xremnabg3x

  • MD5

    19a36db7be53c3d07bc0da00f0f70b84

  • SHA1

    c0d20cf37cd7b9bcffdf70a716467d0b3a3e2571

  • SHA256

    0de517bdb20ebd584c93685035efe1917c684630347ee8cab9362c8577774385

  • SHA512

    79ad301f606e7516de51d2fc9042a8c567bd18ee8d3d22aa79740d5771eb48064266055786b1cd6642264aa3eb2b171cc5deac61e3da3dfcc2d93346bb811b67

  • SSDEEP

    6144:1+aX3rX18E7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:1+arFH7a3iwbihym2g7XO3LWUQfh4Co

Score
7/10

Malware Config

Targets

    • Target

      0de517bdb20ebd584c93685035efe1917c684630347ee8cab9362c8577774385

    • Size

      577KB

    • MD5

      19a36db7be53c3d07bc0da00f0f70b84

    • SHA1

      c0d20cf37cd7b9bcffdf70a716467d0b3a3e2571

    • SHA256

      0de517bdb20ebd584c93685035efe1917c684630347ee8cab9362c8577774385

    • SHA512

      79ad301f606e7516de51d2fc9042a8c567bd18ee8d3d22aa79740d5771eb48064266055786b1cd6642264aa3eb2b171cc5deac61e3da3dfcc2d93346bb811b67

    • SSDEEP

      6144:1+aX3rX18E7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:1+arFH7a3iwbihym2g7XO3LWUQfh4Co

    Score
    7/10
    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks