General

  • Target

    ef81276ae0733ae1bd95c849013a86bd54bdaef1dc1148998df6c8581d779377

  • Size

    3.0MB

  • Sample

    240603-f2te5ach9t

  • MD5

    a0d09cbc87e821c53710c5e170b4e97b

  • SHA1

    0e6df32e856eda320607ba5a9fd3a031bfe02940

  • SHA256

    ef81276ae0733ae1bd95c849013a86bd54bdaef1dc1148998df6c8581d779377

  • SHA512

    26ca2f2a4d4a25ae2a57dc6a2e975d4f799916050ce1dbb9ad7689c0108da3b35a82048c53122f945603bd2c5b7cc9276c65bc2be271279f1c1fb5b8d538e6ee

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBqB/bSqz8:sxX7QnxrloE5dpUpdbVz8

Malware Config

Targets

    • Target

      ef81276ae0733ae1bd95c849013a86bd54bdaef1dc1148998df6c8581d779377

    • Size

      3.0MB

    • MD5

      a0d09cbc87e821c53710c5e170b4e97b

    • SHA1

      0e6df32e856eda320607ba5a9fd3a031bfe02940

    • SHA256

      ef81276ae0733ae1bd95c849013a86bd54bdaef1dc1148998df6c8581d779377

    • SHA512

      26ca2f2a4d4a25ae2a57dc6a2e975d4f799916050ce1dbb9ad7689c0108da3b35a82048c53122f945603bd2c5b7cc9276c65bc2be271279f1c1fb5b8d538e6ee

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBqB/bSqz8:sxX7QnxrloE5dpUpdbVz8

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks