General

  • Target

    5be8fc9a31943fb4795106f3e35c25232267e33eaa3a43425864ed0c3f60784d

  • Size

    720KB

  • Sample

    240428-1fltdahf99

  • MD5

    7be5a9ab0296315788b3244ae5f6437c

  • SHA1

    635ac29ce9146de63bf6ab60b08892a252376ac4

  • SHA256

    5be8fc9a31943fb4795106f3e35c25232267e33eaa3a43425864ed0c3f60784d

  • SHA512

    47d21a405e2d3e9a5a8e063be8738e154458284436e88a03a9c831bd1126d42076c05965c51e8d880c6186e2e30281655ab5549aef92df2867e12a1d9383bea8

  • SSDEEP

    12288:yrDPdYKGVlM41NTnXENcMduaD3aawgPwCnQ3MHv8CI4OJ1bbPHHcFb+KKqCGNpcj:yrD1YRVldlnXfH9gPwCn7vOb7HHcp/CB

Score
7/10

Malware Config

Targets

    • Target

      5be8fc9a31943fb4795106f3e35c25232267e33eaa3a43425864ed0c3f60784d

    • Size

      720KB

    • MD5

      7be5a9ab0296315788b3244ae5f6437c

    • SHA1

      635ac29ce9146de63bf6ab60b08892a252376ac4

    • SHA256

      5be8fc9a31943fb4795106f3e35c25232267e33eaa3a43425864ed0c3f60784d

    • SHA512

      47d21a405e2d3e9a5a8e063be8738e154458284436e88a03a9c831bd1126d42076c05965c51e8d880c6186e2e30281655ab5549aef92df2867e12a1d9383bea8

    • SSDEEP

      12288:yrDPdYKGVlM41NTnXENcMduaD3aawgPwCnQ3MHv8CI4OJ1bbPHHcFb+KKqCGNpcj:yrD1YRVldlnXfH9gPwCn7vOb7HHcp/CB

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks