General

  • Target

    c2ac0fa96f52879a05701e3787d4ff6e.exe

  • Size

    1.5MB

  • Sample

    240517-r3gcqsce26

  • MD5

    c2ac0fa96f52879a05701e3787d4ff6e

  • SHA1

    4c5471ae66a4cd1a36df4ddbdd225851534f863e

  • SHA256

    d1748fcf753d3b528ab3a4fdec3a6812850778b025bcf896dfa5dd042e91404e

  • SHA512

    58a235fae2f660d944520decdd2aec16961336b5972d4646af6a8518a42ac58da3da70be0f9b62d59d5b2bd3d3d0630e551dc8322ef927d36baa29f61595f880

  • SSDEEP

    24576:DLcLcL9J0sDOfTpPHQy5Sk2mg9t6jQ1QjqjI4/izRXTOkMtrIceMaFPjkjD29:DggcsDOfTJ9299t6jQa2IakOElMaFLk

Malware Config

Targets

    • Target

      c2ac0fa96f52879a05701e3787d4ff6e.exe

    • Size

      1.5MB

    • MD5

      c2ac0fa96f52879a05701e3787d4ff6e

    • SHA1

      4c5471ae66a4cd1a36df4ddbdd225851534f863e

    • SHA256

      d1748fcf753d3b528ab3a4fdec3a6812850778b025bcf896dfa5dd042e91404e

    • SHA512

      58a235fae2f660d944520decdd2aec16961336b5972d4646af6a8518a42ac58da3da70be0f9b62d59d5b2bd3d3d0630e551dc8322ef927d36baa29f61595f880

    • SSDEEP

      24576:DLcLcL9J0sDOfTpPHQy5Sk2mg9t6jQ1QjqjI4/izRXTOkMtrIceMaFPjkjD29:DggcsDOfTJ9299t6jQa2IakOElMaFLk

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks