General

  • Target

    565083087159c893bd1983438b9dfe0098a8fa09dd326112bebe07f36b1b135c

  • Size

    1.8MB

  • Sample

    240524-r1wdwahg54

  • MD5

    dcd650dc1d3bb431a0dbe7fdca78da20

  • SHA1

    bb13198a6f86baa5f36fba389718441f386b4015

  • SHA256

    565083087159c893bd1983438b9dfe0098a8fa09dd326112bebe07f36b1b135c

  • SHA512

    3449ad379ed2afe3d84096138ca140220c9c8f4164efeff420526bc11c429478efe843cc1dd77e0497d3af49bcaf947a9ba4464c7ddb9c68c137e0e268cc9aed

  • SSDEEP

    49152:dKJ0WR7AFPyyiSruXKpk3WFDL9zxnSq+pFzz+/2fNR:dKlBAFPydSS6W6X9lnX+pFtFR

Score
7/10

Malware Config

Targets

    • Target

      565083087159c893bd1983438b9dfe0098a8fa09dd326112bebe07f36b1b135c

    • Size

      1.8MB

    • MD5

      dcd650dc1d3bb431a0dbe7fdca78da20

    • SHA1

      bb13198a6f86baa5f36fba389718441f386b4015

    • SHA256

      565083087159c893bd1983438b9dfe0098a8fa09dd326112bebe07f36b1b135c

    • SHA512

      3449ad379ed2afe3d84096138ca140220c9c8f4164efeff420526bc11c429478efe843cc1dd77e0497d3af49bcaf947a9ba4464c7ddb9c68c137e0e268cc9aed

    • SSDEEP

      49152:dKJ0WR7AFPyyiSruXKpk3WFDL9zxnSq+pFzz+/2fNR:dKlBAFPydSS6W6X9lnX+pFtFR

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks