General

  • Target

    1c7d1efcf22f3244834a6b9cc5b281a9ba99c5e2ac6b8718599807d3cd363a27

  • Size

    2.6MB

  • Sample

    240608-yhkyragb25

  • MD5

    e870a9cb2ba5ff1c9133ed611e485d03

  • SHA1

    e0e4fa2c893186f83c7161264d05d8ae3fd99b51

  • SHA256

    1c7d1efcf22f3244834a6b9cc5b281a9ba99c5e2ac6b8718599807d3cd363a27

  • SHA512

    debd728eb6f364f1fd398713ef9c78d0a44034d5d02fcc148fb21b35b12a0def327e3a677534ed15ac0cdf9994d008efae23a9af939bd32ee595151cd1e5c18b

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bS:sxX7QnxrloE5dpUpMb

Malware Config

Targets

    • Target

      1c7d1efcf22f3244834a6b9cc5b281a9ba99c5e2ac6b8718599807d3cd363a27

    • Size

      2.6MB

    • MD5

      e870a9cb2ba5ff1c9133ed611e485d03

    • SHA1

      e0e4fa2c893186f83c7161264d05d8ae3fd99b51

    • SHA256

      1c7d1efcf22f3244834a6b9cc5b281a9ba99c5e2ac6b8718599807d3cd363a27

    • SHA512

      debd728eb6f364f1fd398713ef9c78d0a44034d5d02fcc148fb21b35b12a0def327e3a677534ed15ac0cdf9994d008efae23a9af939bd32ee595151cd1e5c18b

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bS:sxX7QnxrloE5dpUpMb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks