General

  • Target

    a2b42bccb5fe414beafcae061f08d28d2630ecb1ff630c606d36d1d0ddbe4f14

  • Size

    3.0MB

  • Sample

    240604-bdpptagd76

  • MD5

    616234511c6a7562b1890b44e69c7203

  • SHA1

    64f2130ce19f086a92e843c009e99b93aeb68e5f

  • SHA256

    a2b42bccb5fe414beafcae061f08d28d2630ecb1ff630c606d36d1d0ddbe4f14

  • SHA512

    50a7b1d4c53a846261067385c8a21f5387494f3691772c47cdd5d3b55d21880703964aa51ac75361619f44fe78efca38303acca2d7bc3cdfba86c4ab61158d33

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bSqz8:sxX7QnxrloE5dpUpJbVz8

Malware Config

Targets

    • Target

      a2b42bccb5fe414beafcae061f08d28d2630ecb1ff630c606d36d1d0ddbe4f14

    • Size

      3.0MB

    • MD5

      616234511c6a7562b1890b44e69c7203

    • SHA1

      64f2130ce19f086a92e843c009e99b93aeb68e5f

    • SHA256

      a2b42bccb5fe414beafcae061f08d28d2630ecb1ff630c606d36d1d0ddbe4f14

    • SHA512

      50a7b1d4c53a846261067385c8a21f5387494f3691772c47cdd5d3b55d21880703964aa51ac75361619f44fe78efca38303acca2d7bc3cdfba86c4ab61158d33

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bSqz8:sxX7QnxrloE5dpUpJbVz8

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks