General

  • Target

    476ee9c0b7f7f864b169f0d1beb1a3bbcc7dbab1bae7d7f77ee69e22ad25ff66

  • Size

    725KB

  • Sample

    240410-msghjach29

  • MD5

    b0b058100c052c94d700fbbd8497a35d

  • SHA1

    0797cda90de0c745ea47e95ff56c19aa0afa3c86

  • SHA256

    476ee9c0b7f7f864b169f0d1beb1a3bbcc7dbab1bae7d7f77ee69e22ad25ff66

  • SHA512

    8e4d4e3d72cd1b52254a8ddfd5aca4bc1bfdc0858e4a67ee386b7dec37d03f488c09772c953ea3aabdccd75a17646359c691db6f3096579ac22051e42977b0d2

  • SSDEEP

    12288:UbcggEUzrNSLSX0IHENHfNhfpAGN56Ud26t3LhZ96qejwn22q5iDoTm366DsiErz:AVUHyfqa26t7hmxjw2r5iD86DsMemEFn

Malware Config

Targets

    • Target

      476ee9c0b7f7f864b169f0d1beb1a3bbcc7dbab1bae7d7f77ee69e22ad25ff66

    • Size

      725KB

    • MD5

      b0b058100c052c94d700fbbd8497a35d

    • SHA1

      0797cda90de0c745ea47e95ff56c19aa0afa3c86

    • SHA256

      476ee9c0b7f7f864b169f0d1beb1a3bbcc7dbab1bae7d7f77ee69e22ad25ff66

    • SHA512

      8e4d4e3d72cd1b52254a8ddfd5aca4bc1bfdc0858e4a67ee386b7dec37d03f488c09772c953ea3aabdccd75a17646359c691db6f3096579ac22051e42977b0d2

    • SSDEEP

      12288:UbcggEUzrNSLSX0IHENHfNhfpAGN56Ud26t3LhZ96qejwn22q5iDoTm366DsiErz:AVUHyfqa26t7hmxjw2r5iD86DsMemEFn

    • OutSteel

      OutSteel is a file uploader and document stealer written in AutoIT.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks