General

  • Target

    2dccc5ce67b83d934a174f4104a931c8553180b1607a657a8ce2f9bb3e5bb6c1

  • Size

    2.6MB

  • Sample

    240524-yvv99ahd6s

  • MD5

    6599618adc84b863d04ce3544c73c91e

  • SHA1

    04a6aa8195f72a5f18ac49e4a740c1526c37587c

  • SHA256

    2dccc5ce67b83d934a174f4104a931c8553180b1607a657a8ce2f9bb3e5bb6c1

  • SHA512

    93fb342247ee8c9c8f2ddf0d21b58f016a8e3c801bc9b5254cd66ef9197c50d87d72f6c0c22b91328fd1fd85dc4412e529784cc757e6da790127e2a9bdd547fb

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bS:sxX7QnxrloE5dpUprb

Malware Config

Targets

    • Target

      2dccc5ce67b83d934a174f4104a931c8553180b1607a657a8ce2f9bb3e5bb6c1

    • Size

      2.6MB

    • MD5

      6599618adc84b863d04ce3544c73c91e

    • SHA1

      04a6aa8195f72a5f18ac49e4a740c1526c37587c

    • SHA256

      2dccc5ce67b83d934a174f4104a931c8553180b1607a657a8ce2f9bb3e5bb6c1

    • SHA512

      93fb342247ee8c9c8f2ddf0d21b58f016a8e3c801bc9b5254cd66ef9197c50d87d72f6c0c22b91328fd1fd85dc4412e529784cc757e6da790127e2a9bdd547fb

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bS:sxX7QnxrloE5dpUprb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks