General

  • Target

    bd83e801b836906bab4854351b4d6000e0a435736524a504b9839b5f7bdf97cc

  • Size

    540KB

  • Sample

    240410-q8lnzaaa82

  • MD5

    fa4d702a335aab44355c84863395617a

  • SHA1

    a2a308cec43c9bea9260243970aa914fb8751707

  • SHA256

    bd83e801b836906bab4854351b4d6000e0a435736524a504b9839b5f7bdf97cc

  • SHA512

    167812dda2ee176797ead9ca7b83bc4ce5d6d6581d98858b3d9b06e3aa9bdec6c578927ffefb3246c3ec33d14c42e269011f91b6b687a5ef35f0184d4d3848f9

  • SSDEEP

    12288:RmE3Pbja+5nDs+4EQG28nPTSabSMhPmpRUVhSh3S7ukH3N6eC2:cENs+4En28nmMkpMSqXN6q

Malware Config

Targets

    • Target

      bd83e801b836906bab4854351b4d6000e0a435736524a504b9839b5f7bdf97cc

    • Size

      540KB

    • MD5

      fa4d702a335aab44355c84863395617a

    • SHA1

      a2a308cec43c9bea9260243970aa914fb8751707

    • SHA256

      bd83e801b836906bab4854351b4d6000e0a435736524a504b9839b5f7bdf97cc

    • SHA512

      167812dda2ee176797ead9ca7b83bc4ce5d6d6581d98858b3d9b06e3aa9bdec6c578927ffefb3246c3ec33d14c42e269011f91b6b687a5ef35f0184d4d3848f9

    • SSDEEP

      12288:RmE3Pbja+5nDs+4EQG28nPTSabSMhPmpRUVhSh3S7ukH3N6eC2:cENs+4En28nmMkpMSqXN6q

    • OutSteel

      OutSteel is a file uploader and document stealer written in AutoIT.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks