General

  • Target

    efbf0e6a097d2ace76c4e1041313d76238d4097648b9ef4dd61a58831b954588

  • Size

    5.8MB

  • Sample

    240714-pc8ceszcln

  • MD5

    16316ca7ccfc1258eb982208fb6317f8

  • SHA1

    a399f8c581ba30db18f69fc77de1afbf362e864a

  • SHA256

    efbf0e6a097d2ace76c4e1041313d76238d4097648b9ef4dd61a58831b954588

  • SHA512

    fd626f9638ca571d1327413622e5cdf57210283ef69ef2f8679967c75917df4160d41fb52291f76f544a4ca2be499f55bd0c038f2c80d7f08530d227f4d115d3

  • SSDEEP

    98304:a+lAq6x8fzM2/u9FZ0ex1nqEtu9NCrjqjD5I4tMF4+40qunEE:a+RegMQul021S9NCK5I4g4++0EE

Malware Config

Targets

    • Target

      de6ad3a7e011954f1a31e68d083aa35cfe0229ca980724334d3cd1cac2e804e1

    • Size

      17.1MB

    • MD5

      505c82de0d88ad7024d2982e44d1d118

    • SHA1

      798cec05d8875d7afec0e78a1f2eefc30ea961de

    • SHA256

      de6ad3a7e011954f1a31e68d083aa35cfe0229ca980724334d3cd1cac2e804e1

    • SHA512

      536245a22ade94ed378b99ff5ea9fca234c1848f583b1c6db4b6916666d9b59ae538d2c3797b9f1972ff3e6fa4e15f4c3dc16e6934bebc984d89197331f7811e

    • SSDEEP

      98304:/VAj4+4BjIW9rqZdAgNnrYtt+TIGAAU+XeXM+J+JBiGSEX9cUh9iOiTUVtZBgx:/VAjxS6YtuIGlZOcprk

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks