Resubmissions

21/07/2024, 10:03

240721-l3sswaybja10

21/07/2024, 09:38

240721-ll4ttazdpl10

General

  • Target
    c394e1673274a8d0861ed637c425de244ead5f8ffbc7cb84862d9b81ec884505.exe
  • Size 145KB
  • Sample240721-ll4ttazdpl
  • SHA256 c394e1673274a8d0861ed637c425de244ead5f8ffbc7cb84862d9b81ec884505
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      c394e1673274a8d0861ed637c425de244ead5f8ffbc7cb84862d9b81ec884505.exe
    • Size 145KB
    • SHA256 c394e1673274a8d0861ed637c425de244ead5f8ffbc7cb84862d9b81ec884505
    • MD5 SHA1 SHA512 SSDEEP
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks