General

  • Target

    2024-05-23_5ec92914b8b5c4c02c3b79cc1acdc399_avoslocker

  • Size

    1.5MB

  • Sample

    240523-w3hm1sbg7y

  • MD5

    5ec92914b8b5c4c02c3b79cc1acdc399

  • SHA1

    a8925f2c499796723d8e6878688367cfaf9860f6

  • SHA256

    c67a3e0029c408bf15f572b1979f4aaab6571ae423263dddd49bb4a16702395c

  • SHA512

    64c396729451dd8de7a3cf59e1bb24cec96de214688bbd08bc24cd9f4cb139a6d262833426069d8ac3f20fd4b2127d99b7c449ca6f49c26365540c1623394e82

  • SSDEEP

    49152:x+ls+YuQrP1ecUT1Yasgf9Ckt7c20+9qNxUW:x+ls+YuQrP1yXfEkKK90

Score
7/10

Malware Config

Targets

    • Target

      2024-05-23_5ec92914b8b5c4c02c3b79cc1acdc399_avoslocker

    • Size

      1.5MB

    • MD5

      5ec92914b8b5c4c02c3b79cc1acdc399

    • SHA1

      a8925f2c499796723d8e6878688367cfaf9860f6

    • SHA256

      c67a3e0029c408bf15f572b1979f4aaab6571ae423263dddd49bb4a16702395c

    • SHA512

      64c396729451dd8de7a3cf59e1bb24cec96de214688bbd08bc24cd9f4cb139a6d262833426069d8ac3f20fd4b2127d99b7c449ca6f49c26365540c1623394e82

    • SSDEEP

      49152:x+ls+YuQrP1ecUT1Yasgf9Ckt7c20+9qNxUW:x+ls+YuQrP1yXfEkKK90

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks