General

  • Target

    57078b45c225a5063d3b7acaca6202d47e5ee931cd39295c7c899f5e51d01b19

  • Size

    4.0MB

  • Sample

    240611-12tfcatdrr

  • MD5

    2ee0a449814fb02ce0d0a5ffdd2ec4d8

  • SHA1

    2d0c7458f4dd5996ee14e278ce07cfefa08f35ac

  • SHA256

    57078b45c225a5063d3b7acaca6202d47e5ee931cd39295c7c899f5e51d01b19

  • SHA512

    7b870c2a3c91370906c817fe82a925cb547fc5d00359e341006c525acde13e935fb408b352ecaae0cfe50b61bd999b348abd86876306f3353ba6b663411b65e7

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpjbVz8eLFcz

Malware Config

Targets

    • Target

      57078b45c225a5063d3b7acaca6202d47e5ee931cd39295c7c899f5e51d01b19

    • Size

      4.0MB

    • MD5

      2ee0a449814fb02ce0d0a5ffdd2ec4d8

    • SHA1

      2d0c7458f4dd5996ee14e278ce07cfefa08f35ac

    • SHA256

      57078b45c225a5063d3b7acaca6202d47e5ee931cd39295c7c899f5e51d01b19

    • SHA512

      7b870c2a3c91370906c817fe82a925cb547fc5d00359e341006c525acde13e935fb408b352ecaae0cfe50b61bd999b348abd86876306f3353ba6b663411b65e7

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpjbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks