General

  • Target

    43f1986887d92c87068be0bd98b798e6e59cbe88caa860424eb626b28ab57c2d

  • Size

    272KB

  • Sample

    240407-zbmdnseb58

  • MD5

    94d22104f4d38a0b77384656e8d83b3b

  • SHA1

    c12667e2c19395ca5b121610975788bfaa49f31c

  • SHA256

    43f1986887d92c87068be0bd98b798e6e59cbe88caa860424eb626b28ab57c2d

  • SHA512

    2db5f2cb0bdee083a401f171f3c969ddf89d0bd2d1352d53d52b07ec4c46c73a6135dc3192312e167a134fe970e13dc2e6eb98a460e2ba04fc212f08b27540aa

  • SSDEEP

    6144:5vRIGikQo/cAMPbpz3ZKw9TcnEYelfXHM8DwADYf:53QfAMPbmWcD9886Yf

Malware Config

Targets

    • Target

      43f1986887d92c87068be0bd98b798e6e59cbe88caa860424eb626b28ab57c2d

    • Size

      272KB

    • MD5

      94d22104f4d38a0b77384656e8d83b3b

    • SHA1

      c12667e2c19395ca5b121610975788bfaa49f31c

    • SHA256

      43f1986887d92c87068be0bd98b798e6e59cbe88caa860424eb626b28ab57c2d

    • SHA512

      2db5f2cb0bdee083a401f171f3c969ddf89d0bd2d1352d53d52b07ec4c46c73a6135dc3192312e167a134fe970e13dc2e6eb98a460e2ba04fc212f08b27540aa

    • SSDEEP

      6144:5vRIGikQo/cAMPbpz3ZKw9TcnEYelfXHM8DwADYf:53QfAMPbmWcD9886Yf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks