General

  • Target

    941f4e48b737449c86825809a5ae419a47f1fa55a0dd0a12920539f99fb9d987

  • Size

    2.6MB

  • Sample

    240604-anaszaee3y

  • MD5

    514f35751c767a1c308307b8ab16582f

  • SHA1

    5b43a258c112ebccb311f32777ccbeaffaa7bbac

  • SHA256

    941f4e48b737449c86825809a5ae419a47f1fa55a0dd0a12920539f99fb9d987

  • SHA512

    62d2f0425ec4a306bb35272e3530fd911085df47a384a4f9d729866a36bf56ca671a80ebfa1f192e0272ee7e8f0f0cd1ce5cddf9abcb51caa8a9272382eb7536

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBTB/bS:sxX7QnxrloE5dpUpob

Malware Config

Targets

    • Target

      941f4e48b737449c86825809a5ae419a47f1fa55a0dd0a12920539f99fb9d987

    • Size

      2.6MB

    • MD5

      514f35751c767a1c308307b8ab16582f

    • SHA1

      5b43a258c112ebccb311f32777ccbeaffaa7bbac

    • SHA256

      941f4e48b737449c86825809a5ae419a47f1fa55a0dd0a12920539f99fb9d987

    • SHA512

      62d2f0425ec4a306bb35272e3530fd911085df47a384a4f9d729866a36bf56ca671a80ebfa1f192e0272ee7e8f0f0cd1ce5cddf9abcb51caa8a9272382eb7536

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBTB/bS:sxX7QnxrloE5dpUpob

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks