General

  • Target

    ed012cea4b23ee4b76f9ea71b99f86ea3c0a2e2ff4a5ebeeac02a2cf3e426dd8

  • Size

    5.5MB

  • Sample

    240523-e6n6jadh51

  • MD5

    cb4772af8906a6dfc2d67003c8e09dc8

  • SHA1

    3d9198f9fc950400ca7f031156732608e1a6aacc

  • SHA256

    ed012cea4b23ee4b76f9ea71b99f86ea3c0a2e2ff4a5ebeeac02a2cf3e426dd8

  • SHA512

    2aabbd4c6f0dc15ef4d7757c90e7f4af5dad433f986c387a50353f7c116eefd912ab43d1558b2c2d9e019a02089d02e074461c0b510961492fe0faaa949749f5

  • SSDEEP

    49152:GEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGff:8AI5pAdVJn9tbnR1VgBVm1qo4w

Score
7/10

Malware Config

Targets

    • Target

      ed012cea4b23ee4b76f9ea71b99f86ea3c0a2e2ff4a5ebeeac02a2cf3e426dd8

    • Size

      5.5MB

    • MD5

      cb4772af8906a6dfc2d67003c8e09dc8

    • SHA1

      3d9198f9fc950400ca7f031156732608e1a6aacc

    • SHA256

      ed012cea4b23ee4b76f9ea71b99f86ea3c0a2e2ff4a5ebeeac02a2cf3e426dd8

    • SHA512

      2aabbd4c6f0dc15ef4d7757c90e7f4af5dad433f986c387a50353f7c116eefd912ab43d1558b2c2d9e019a02089d02e074461c0b510961492fe0faaa949749f5

    • SSDEEP

      49152:GEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGff:8AI5pAdVJn9tbnR1VgBVm1qo4w

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

4
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks