General

  • Target

    2024-06-12_6e0680688338bc2d90729d61c8f90eb6_mafia

  • Size

    2.3MB

  • Sample

    240612-pm3jxsyclq

  • MD5

    6e0680688338bc2d90729d61c8f90eb6

  • SHA1

    6c29d849b08dd191ba9dcefeeca443ec0ed81823

  • SHA256

    24d517f679a564f8e8f0d276475e54aa8dcf5d42163c12a04b19afa37914ee0a

  • SHA512

    d530f5d3afc6daa68b2bf358b9bea008083259ea08907d2547ab24d5b644f9734d106e8e7e0ada1420be333bdefcc56dc3e0b00b402b1f2546b51fe9c0e22759

  • SSDEEP

    49152:FW5QTW3vYptbUE0QI662K8E11Jkc/ookTD79C6A4tVxckwD1fJ4klKXnU:pptbUE0Qw2K51Jkc/ooYk45xEfJ4k

Score
9/10

Malware Config

Targets

    • Target

      2024-06-12_6e0680688338bc2d90729d61c8f90eb6_mafia

    • Size

      2.3MB

    • MD5

      6e0680688338bc2d90729d61c8f90eb6

    • SHA1

      6c29d849b08dd191ba9dcefeeca443ec0ed81823

    • SHA256

      24d517f679a564f8e8f0d276475e54aa8dcf5d42163c12a04b19afa37914ee0a

    • SHA512

      d530f5d3afc6daa68b2bf358b9bea008083259ea08907d2547ab24d5b644f9734d106e8e7e0ada1420be333bdefcc56dc3e0b00b402b1f2546b51fe9c0e22759

    • SSDEEP

      49152:FW5QTW3vYptbUE0QI662K8E11Jkc/ookTD79C6A4tVxckwD1fJ4klKXnU:pptbUE0Qw2K51Jkc/ooYk45xEfJ4k

    Score
    9/10
    • Detects images embedding archives. Observed in TheRat RAT.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks