General

  • Target

    f3a583e1a14257aa4f48db018981f0cbabdca3e70e2c0315313203ce08ccb655

  • Size

    5.7MB

  • Sample

    240501-xyek8sge43

  • MD5

    a87bee4da1eef368e329fd35e2284611

  • SHA1

    15202f6d9b2bf752df98b529786ae9540dcb22a7

  • SHA256

    f3a583e1a14257aa4f48db018981f0cbabdca3e70e2c0315313203ce08ccb655

  • SHA512

    a31fa0144c41620746363734e48d7bc082a38190feefcf46292399f21417a09c340e05451aac742b8f751346f7d983d4c81835cff41dc914962d6022129f7024

  • SSDEEP

    49152:2BBPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:27KUgTH2M2m9UMpu1QfLczqssnKSk

Score
7/10

Malware Config

Targets

    • Target

      f3a583e1a14257aa4f48db018981f0cbabdca3e70e2c0315313203ce08ccb655

    • Size

      5.7MB

    • MD5

      a87bee4da1eef368e329fd35e2284611

    • SHA1

      15202f6d9b2bf752df98b529786ae9540dcb22a7

    • SHA256

      f3a583e1a14257aa4f48db018981f0cbabdca3e70e2c0315313203ce08ccb655

    • SHA512

      a31fa0144c41620746363734e48d7bc082a38190feefcf46292399f21417a09c340e05451aac742b8f751346f7d983d4c81835cff41dc914962d6022129f7024

    • SSDEEP

      49152:2BBPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:27KUgTH2M2m9UMpu1QfLczqssnKSk

    Score
    7/10
    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks