General

  • Target

    3855efc646612145c8dad2aba816a9f0N.exe

  • Size

    3.0MB

  • Sample

    240712-jhjclawgmh

  • MD5

    3855efc646612145c8dad2aba816a9f0

  • SHA1

    45e127ce93874dafd541c8ee3ced003960bd008e

  • SHA256

    105a89863c099c81345a9b9ca771f1795af7d212e6b33cd3e0b7e88cf31fdf8b

  • SHA512

    2dc84b34f86248e9c2b12b2f4f893a7404ef9f835da717ee1d2bd913a130389a18ead28e388faaad237f6798400ffe6fb0151e77f25164ec07118a8c03eada87

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBGB/bSqz8b6LNX:sxX7QnxrloE5dpUpVbVz8eLF

Malware Config

Targets

    • Target

      3855efc646612145c8dad2aba816a9f0N.exe

    • Size

      3.0MB

    • MD5

      3855efc646612145c8dad2aba816a9f0

    • SHA1

      45e127ce93874dafd541c8ee3ced003960bd008e

    • SHA256

      105a89863c099c81345a9b9ca771f1795af7d212e6b33cd3e0b7e88cf31fdf8b

    • SHA512

      2dc84b34f86248e9c2b12b2f4f893a7404ef9f835da717ee1d2bd913a130389a18ead28e388faaad237f6798400ffe6fb0151e77f25164ec07118a8c03eada87

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBGB/bSqz8b6LNX:sxX7QnxrloE5dpUpVbVz8eLF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks