General

  • Target

    acd7d069120120fcbc09aef8d0369100N.exe

  • Size

    648KB

  • Sample

    240725-kwxykszblm

  • MD5

    acd7d069120120fcbc09aef8d0369100

  • SHA1

    05786ab1c635d7a27a9ec78e1e968cd87d2bb382

  • SHA256

    95a6cf632b2a875eb38f7233bca559143c3f06216e459c059251a7b62b8b7fa0

  • SHA512

    ead07f6dbfcf2c904640c9d2f2caadb35663ac848c6bba14b3c8c389626e9bceeee5abf642e99b016a9d4d12a5d92ec558f17d1c9a624ec2c853a6ecf6b55241

  • SSDEEP

    12288:Vqz2DWUEUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8c:4z2DWHatr0zAiX90z/F0jsFB3SQk/

Malware Config

Targets

    • Target

      acd7d069120120fcbc09aef8d0369100N.exe

    • Size

      648KB

    • MD5

      acd7d069120120fcbc09aef8d0369100

    • SHA1

      05786ab1c635d7a27a9ec78e1e968cd87d2bb382

    • SHA256

      95a6cf632b2a875eb38f7233bca559143c3f06216e459c059251a7b62b8b7fa0

    • SHA512

      ead07f6dbfcf2c904640c9d2f2caadb35663ac848c6bba14b3c8c389626e9bceeee5abf642e99b016a9d4d12a5d92ec558f17d1c9a624ec2c853a6ecf6b55241

    • SSDEEP

      12288:Vqz2DWUEUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8c:4z2DWHatr0zAiX90z/F0jsFB3SQk/

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks