General

  • Target

    46580c26f8262d63dc0d3e6b97e009652f15d27b42b60056e87b0fe2289f374a

  • Size

    213KB

  • Sample

    240407-zdv4laec47

  • MD5

    85b7b6b33e0a8b64527dc2055215d77b

  • SHA1

    aa5eca75a0fc77d883a9f2c10ca07382bcfcdded

  • SHA256

    46580c26f8262d63dc0d3e6b97e009652f15d27b42b60056e87b0fe2289f374a

  • SHA512

    a9628e5353d63b3102be9740998811eeeed553f2694df69e89110b5f4b3c268f001578ad34705b0fe12e1fb9ec4704b0a8dd0cc3ec1f5997e0f1b2a38042a69a

  • SSDEEP

    6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2x:Zv1nWdQP1EDhZPx

Malware Config

Targets

    • Target

      46580c26f8262d63dc0d3e6b97e009652f15d27b42b60056e87b0fe2289f374a

    • Size

      213KB

    • MD5

      85b7b6b33e0a8b64527dc2055215d77b

    • SHA1

      aa5eca75a0fc77d883a9f2c10ca07382bcfcdded

    • SHA256

      46580c26f8262d63dc0d3e6b97e009652f15d27b42b60056e87b0fe2289f374a

    • SHA512

      a9628e5353d63b3102be9740998811eeeed553f2694df69e89110b5f4b3c268f001578ad34705b0fe12e1fb9ec4704b0a8dd0cc3ec1f5997e0f1b2a38042a69a

    • SSDEEP

      6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2x:Zv1nWdQP1EDhZPx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks