General

  • Target

    f27719d6c6eab05b3b1edc9634fd2badff9c050487593289d22de1b6e9ae6478

  • Size

    2.6MB

  • Sample

    240711-j34h9szdla

  • MD5

    0d559bf67d9004392ac2343c9b7f5735

  • SHA1

    725f1d585c53dc46fc17ffdfc9893e9d299e3424

  • SHA256

    f27719d6c6eab05b3b1edc9634fd2badff9c050487593289d22de1b6e9ae6478

  • SHA512

    d34a01156333b66645ec3316b2bd86d3f147d226cfdf4732c825b921978781f2f78a04664438acf6e544fdefcc01a48391e97664e7ec5d437285cae629324146

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bS:sxX7QnxrloE5dpUpLb

Malware Config

Targets

    • Target

      f27719d6c6eab05b3b1edc9634fd2badff9c050487593289d22de1b6e9ae6478

    • Size

      2.6MB

    • MD5

      0d559bf67d9004392ac2343c9b7f5735

    • SHA1

      725f1d585c53dc46fc17ffdfc9893e9d299e3424

    • SHA256

      f27719d6c6eab05b3b1edc9634fd2badff9c050487593289d22de1b6e9ae6478

    • SHA512

      d34a01156333b66645ec3316b2bd86d3f147d226cfdf4732c825b921978781f2f78a04664438acf6e544fdefcc01a48391e97664e7ec5d437285cae629324146

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bS:sxX7QnxrloE5dpUpLb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks