General

  • Target

    5af62a91a027af7a7caef44554b79e75bb8e89469e53ced4cdcd9b0eb777d9cb

  • Size

    625KB

  • Sample

    240428-1dwksshf62

  • MD5

    d1cb7e79e26185047827632480e6800d

  • SHA1

    1af3451e7a9ae88e7f36beb5be8a72e5744e2870

  • SHA256

    5af62a91a027af7a7caef44554b79e75bb8e89469e53ced4cdcd9b0eb777d9cb

  • SHA512

    af0da317106e11cf5831505796c82b7afeb71507556c3070934a8fec44b14fbe3f70204697e7dfd77f694cb58ec00c2ad61d7588035c9b86c138cb3b67899814

  • SSDEEP

    12288:gJK4+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:yK4+mIJz5IcuMlQHJxrDiSi

Score
7/10

Malware Config

Targets

    • Target

      5af62a91a027af7a7caef44554b79e75bb8e89469e53ced4cdcd9b0eb777d9cb

    • Size

      625KB

    • MD5

      d1cb7e79e26185047827632480e6800d

    • SHA1

      1af3451e7a9ae88e7f36beb5be8a72e5744e2870

    • SHA256

      5af62a91a027af7a7caef44554b79e75bb8e89469e53ced4cdcd9b0eb777d9cb

    • SHA512

      af0da317106e11cf5831505796c82b7afeb71507556c3070934a8fec44b14fbe3f70204697e7dfd77f694cb58ec00c2ad61d7588035c9b86c138cb3b67899814

    • SSDEEP

      12288:gJK4+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:yK4+mIJz5IcuMlQHJxrDiSi

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks