General

  • Target

    9f73b2e1be7037c71d1d18c4ce6fa6ea347dedbf49671e2329158e9ac243560b

  • Size

    2.6MB

  • Sample

    240428-dtcraseh59

  • MD5

    34726012d68ffb86bf90cb5fb3ede893

  • SHA1

    b1d8f4f5ade4dbc7a461a8188636b0231b294566

  • SHA256

    9f73b2e1be7037c71d1d18c4ce6fa6ea347dedbf49671e2329158e9ac243560b

  • SHA512

    2078e3dec0d900b498b4c893a2051d66b1deb9a1880c7bcf2d3c19e8602670613fc268fcf799586b7255086c89c338a3bd67d470bf715b30cbd8e01be5dfe96e

  • SSDEEP

    49152:hPZHVeyVETYDUJNAFCT/qJka+aOVE/Y0rHCEpXhEQTZ1lsc07PIw+AKtHY2nSn2v:RpoTYDUNWC/a+PV/GH12Iw+AU4Lc

Score
7/10

Malware Config

Targets

    • Target

      9f73b2e1be7037c71d1d18c4ce6fa6ea347dedbf49671e2329158e9ac243560b

    • Size

      2.6MB

    • MD5

      34726012d68ffb86bf90cb5fb3ede893

    • SHA1

      b1d8f4f5ade4dbc7a461a8188636b0231b294566

    • SHA256

      9f73b2e1be7037c71d1d18c4ce6fa6ea347dedbf49671e2329158e9ac243560b

    • SHA512

      2078e3dec0d900b498b4c893a2051d66b1deb9a1880c7bcf2d3c19e8602670613fc268fcf799586b7255086c89c338a3bd67d470bf715b30cbd8e01be5dfe96e

    • SSDEEP

      49152:hPZHVeyVETYDUJNAFCT/qJka+aOVE/Y0rHCEpXhEQTZ1lsc07PIw+AKtHY2nSn2v:RpoTYDUNWC/a+PV/GH12Iw+AU4Lc

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks