General

  • Target

    aab3cac54569b7634b1adfd4ba40c8a0N.exe

  • Size

    1.5MB

  • Sample

    240725-knv41syfpm

  • MD5

    aab3cac54569b7634b1adfd4ba40c8a0

  • SHA1

    8aa8d9ebcbd433b16067beb8a60babd45b2e5d0e

  • SHA256

    2fceadb416629e16570b7435b607b2f8233d780ed0ef65eaa2bac61fcdb1dadd

  • SHA512

    7624ef502d0d33560a9819ff98d04bf36409da9adc76d7582d7bcbbd8f4c0dadccc023ee3de98ce31e603c1ba8d7d16b8486ce86d17fa284e214644ea5b17b90

  • SSDEEP

    12288:vwz2DWUEwYeskMjFvm0qKWjr/pMoVx8JX8it802q3LZj+:Yz2DW0sRjhm0Ijr/eax8JXO02q3A

Malware Config

Targets

    • Target

      aab3cac54569b7634b1adfd4ba40c8a0N.exe

    • Size

      1.5MB

    • MD5

      aab3cac54569b7634b1adfd4ba40c8a0

    • SHA1

      8aa8d9ebcbd433b16067beb8a60babd45b2e5d0e

    • SHA256

      2fceadb416629e16570b7435b607b2f8233d780ed0ef65eaa2bac61fcdb1dadd

    • SHA512

      7624ef502d0d33560a9819ff98d04bf36409da9adc76d7582d7bcbbd8f4c0dadccc023ee3de98ce31e603c1ba8d7d16b8486ce86d17fa284e214644ea5b17b90

    • SSDEEP

      12288:vwz2DWUEwYeskMjFvm0qKWjr/pMoVx8JX8it802q3LZj+:Yz2DW0sRjhm0Ijr/eax8JXO02q3A

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks