General

  • Target

    ae4b4bf5a731540ff9c71fb0f27dcee6c43e802be1366b5af86b7cdcc313c8e3

  • Size

    4.1MB

  • Sample

    240604-bxx6ashd24

  • MD5

    8bbd966c7e3b7807854bd2e2a8543660

  • SHA1

    df4641c7207efd56d8525d0d3957730adcce4320

  • SHA256

    ae4b4bf5a731540ff9c71fb0f27dcee6c43e802be1366b5af86b7cdcc313c8e3

  • SHA512

    114c04bca1e4ade5377e5faf01b1e7ef488004e485868fff59f784e92712c09f1f5acd02a629b4e67a49e118b06bf045209da3a4ea5e4f57e743405515aea0db

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp4bVz8eLFcz

Malware Config

Targets

    • Target

      ae4b4bf5a731540ff9c71fb0f27dcee6c43e802be1366b5af86b7cdcc313c8e3

    • Size

      4.1MB

    • MD5

      8bbd966c7e3b7807854bd2e2a8543660

    • SHA1

      df4641c7207efd56d8525d0d3957730adcce4320

    • SHA256

      ae4b4bf5a731540ff9c71fb0f27dcee6c43e802be1366b5af86b7cdcc313c8e3

    • SHA512

      114c04bca1e4ade5377e5faf01b1e7ef488004e485868fff59f784e92712c09f1f5acd02a629b4e67a49e118b06bf045209da3a4ea5e4f57e743405515aea0db

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUp4bVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks