General

  • Target

    1cebad6e254fc608c339b86e882b4b71a5bfd5920655117daeac3b0203ea1f1e

  • Size

    3.1MB

  • Sample

    240601-xw7t1acb6v

  • MD5

    31cab91b730e265033025e4a309695e0

  • SHA1

    308b1965cdb522f8342ab9585d1cda5d084a8fd5

  • SHA256

    1cebad6e254fc608c339b86e882b4b71a5bfd5920655117daeac3b0203ea1f1e

  • SHA512

    e82c2c61d81d5ae730fa965555a06146f67fd9b4a72c0ff529a683298b758b181b8a347ba18cdeff3a9556d6d2fcfc47e8bb7c5083982b09ce4988f3f8720160

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bSqz8b6LNXJqI:sxX7QnxrloE5dpUpYbVz8eLFc

Malware Config

Targets

    • Target

      1cebad6e254fc608c339b86e882b4b71a5bfd5920655117daeac3b0203ea1f1e

    • Size

      3.1MB

    • MD5

      31cab91b730e265033025e4a309695e0

    • SHA1

      308b1965cdb522f8342ab9585d1cda5d084a8fd5

    • SHA256

      1cebad6e254fc608c339b86e882b4b71a5bfd5920655117daeac3b0203ea1f1e

    • SHA512

      e82c2c61d81d5ae730fa965555a06146f67fd9b4a72c0ff529a683298b758b181b8a347ba18cdeff3a9556d6d2fcfc47e8bb7c5083982b09ce4988f3f8720160

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bSqz8b6LNXJqI:sxX7QnxrloE5dpUpYbVz8eLFc

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks