General

  • Target

    baa2724cf56c6aa211581e2a7b54d110718a61644e627f157c7caf8a2c5a6b16

  • Size

    5.8MB

  • Sample

    240523-ct5lmsaf52

  • MD5

    c01589807cee983657443c68ef3cc986

  • SHA1

    0d7d5c88b506c0d45eca94a8b73924f26b87c9ae

  • SHA256

    baa2724cf56c6aa211581e2a7b54d110718a61644e627f157c7caf8a2c5a6b16

  • SHA512

    15b0d58d907ab6557b30f2cb2af669fd832151a20d646182757438119b0d2f7f46ddcb9de0c0e8e31c622dd374e4ee3c66b3a3fd6e0c9f730d453e990ff51b72

  • SSDEEP

    98304:FNDwSlUk9KPsUxfAdNmTVi+qkPZKOBuyaoY7cjGi69CEN6rV:F1Uk9KmdNmTsOBuyaopjGiIm

Score
7/10

Malware Config

Targets

    • Target

      baa2724cf56c6aa211581e2a7b54d110718a61644e627f157c7caf8a2c5a6b16

    • Size

      5.8MB

    • MD5

      c01589807cee983657443c68ef3cc986

    • SHA1

      0d7d5c88b506c0d45eca94a8b73924f26b87c9ae

    • SHA256

      baa2724cf56c6aa211581e2a7b54d110718a61644e627f157c7caf8a2c5a6b16

    • SHA512

      15b0d58d907ab6557b30f2cb2af669fd832151a20d646182757438119b0d2f7f46ddcb9de0c0e8e31c622dd374e4ee3c66b3a3fd6e0c9f730d453e990ff51b72

    • SSDEEP

      98304:FNDwSlUk9KPsUxfAdNmTVi+qkPZKOBuyaoY7cjGi69CEN6rV:F1Uk9KmdNmTsOBuyaopjGiIm

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks