General

  • Target

    bsod.bat

  • Size

    245B

  • Sample

    240429-qa671sbf2z

  • MD5

    cbe26c3ef6afc754899d5aee9c9a6ff2

  • SHA1

    d18459dfd94c000b4c13353545d7e49d05f72dd3

  • SHA256

    c88915ae213caec84c0c4d84d52cb84e1f68c6eee6e760ad52602bab890cac12

  • SHA512

    7d5623e324a6cd0fe2237018b4b72539af889eb6de101ea0d6c3928904fc9761bb98057e54f35763549e37d7c46cdaceb3c8af4d2434af4033a5b03e7c26e94e

Malware Config

Targets

    • Target

      bsod.bat

    • Size

      245B

    • MD5

      cbe26c3ef6afc754899d5aee9c9a6ff2

    • SHA1

      d18459dfd94c000b4c13353545d7e49d05f72dd3

    • SHA256

      c88915ae213caec84c0c4d84d52cb84e1f68c6eee6e760ad52602bab890cac12

    • SHA512

      7d5623e324a6cd0fe2237018b4b72539af889eb6de101ea0d6c3928904fc9761bb98057e54f35763549e37d7c46cdaceb3c8af4d2434af4033a5b03e7c26e94e

    • Deletes itself

    • Drops startup file

    • Modifies file permissions

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks