General

  • Target

    13d03a781267b9b24e3dbb6b7aae7280.bin

  • Size

    1.5MB

  • Sample

    240724-cbkthsvckb

  • MD5

    13d03a781267b9b24e3dbb6b7aae7280

  • SHA1

    2322f4673d1915242d908b1a0a4467b4bea5d172

  • SHA256

    f75bc370f2e79622a0db139b990461be0a649aadd1cfd2d0c0669ad0cf6c7755

  • SHA512

    14bdcea4a89fb473d2a7e84f522bae3628b14448b1dc25a0941d25e97b31158c43be1c5a6a25026aeac305856285324c3c6e0a8ce4dcb98fce11ee43d4f8f668

  • SSDEEP

    12288:RCKHJx523mSJCHP6zRhVgeRWNkV0qwI3kVESaGfn0CpkWhNxf4MEJ:RCK4sHPsR9L0O0VJuWhr

Malware Config

Targets

    • Target

      13d03a781267b9b24e3dbb6b7aae7280.bin

    • Size

      1.5MB

    • MD5

      13d03a781267b9b24e3dbb6b7aae7280

    • SHA1

      2322f4673d1915242d908b1a0a4467b4bea5d172

    • SHA256

      f75bc370f2e79622a0db139b990461be0a649aadd1cfd2d0c0669ad0cf6c7755

    • SHA512

      14bdcea4a89fb473d2a7e84f522bae3628b14448b1dc25a0941d25e97b31158c43be1c5a6a25026aeac305856285324c3c6e0a8ce4dcb98fce11ee43d4f8f668

    • SSDEEP

      12288:RCKHJx523mSJCHP6zRhVgeRWNkV0qwI3kVESaGfn0CpkWhNxf4MEJ:RCK4sHPsR9L0O0VJuWhr

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks