General

  • Target

    63b383f8c6a1cc671bdcc5383982db97163a28bb601413fd94e4261a047d782c.exe

  • Size

    71KB

  • Sample

    240523-azew3afb88

  • MD5

    1c18861744413511313ff3ca6de2b6c0

  • SHA1

    564684474c0cbf0ae5e34238cff836b73cd2ab5d

  • SHA256

    63b383f8c6a1cc671bdcc5383982db97163a28bb601413fd94e4261a047d782c

  • SHA512

    5af598616b68ff2b47ec346d8df76db65eae68a32a906f4863e3e0906faad1405c55f900e2eb7aa2e2c8694063ceabf83f0a54037f8549c9977e0a57075f0a5a

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazThS:ZhpAyazIlyazThS

Malware Config

Targets

    • Target

      63b383f8c6a1cc671bdcc5383982db97163a28bb601413fd94e4261a047d782c.exe

    • Size

      71KB

    • MD5

      1c18861744413511313ff3ca6de2b6c0

    • SHA1

      564684474c0cbf0ae5e34238cff836b73cd2ab5d

    • SHA256

      63b383f8c6a1cc671bdcc5383982db97163a28bb601413fd94e4261a047d782c

    • SHA512

      5af598616b68ff2b47ec346d8df76db65eae68a32a906f4863e3e0906faad1405c55f900e2eb7aa2e2c8694063ceabf83f0a54037f8549c9977e0a57075f0a5a

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazThS:ZhpAyazIlyazThS

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks