General

  • Target

    97756a798ad7f9770d912ee7eb990400_NEAS

  • Size

    3.0MB

  • Sample

    240507-jn7mdaad27

  • MD5

    97756a798ad7f9770d912ee7eb990400

  • SHA1

    9838cbb991b7940a356523bfadf97ee98737cda5

  • SHA256

    4146442fea7bf72e5c6d04e1c312676a8afec97129b22a970ad0bdeab2553fe2

  • SHA512

    27c291ad3a8cd469793300770b373819efff5bc1a99367d0ad19342c6c1daa28b452562730b16176fdb8c17e38490bb40d764df475aaaadba7424a05c74e1e63

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBOB/bSqz8b6LNX:sxX7QnxrloE5dpUpNbVz8eLF

Malware Config

Targets

    • Target

      97756a798ad7f9770d912ee7eb990400_NEAS

    • Size

      3.0MB

    • MD5

      97756a798ad7f9770d912ee7eb990400

    • SHA1

      9838cbb991b7940a356523bfadf97ee98737cda5

    • SHA256

      4146442fea7bf72e5c6d04e1c312676a8afec97129b22a970ad0bdeab2553fe2

    • SHA512

      27c291ad3a8cd469793300770b373819efff5bc1a99367d0ad19342c6c1daa28b452562730b16176fdb8c17e38490bb40d764df475aaaadba7424a05c74e1e63

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBOB/bSqz8b6LNX:sxX7QnxrloE5dpUpNbVz8eLF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks