General

  • Target

    6098ae40d57768619f43f71a70fe14c0dd15a7ecd81af58dbc715565cf808918

  • Size

    1.6MB

  • Sample

    240727-2vakbssgnm

  • MD5

    686df67429c4677c27fe66197270fc2e

  • SHA1

    40f54004db1b151958ded58d7787d007cc82e336

  • SHA256

    6098ae40d57768619f43f71a70fe14c0dd15a7ecd81af58dbc715565cf808918

  • SHA512

    1b593d23f6d80a03d17cd3ac7f80f0555a50f9508688d0fa64faa1fac57cd75d34d49b675ce583ecd4d27a365099151956b2e9e01acecb68b1c00f4895db7e18

  • SSDEEP

    24576:8KB0TXQTNjx+mZCkt76f/24pN+XNqNG6hditW:h0TYf9Ckt7c20+9qNxUW

Malware Config

Targets

    • Target

      6098ae40d57768619f43f71a70fe14c0dd15a7ecd81af58dbc715565cf808918

    • Size

      1.6MB

    • MD5

      686df67429c4677c27fe66197270fc2e

    • SHA1

      40f54004db1b151958ded58d7787d007cc82e336

    • SHA256

      6098ae40d57768619f43f71a70fe14c0dd15a7ecd81af58dbc715565cf808918

    • SHA512

      1b593d23f6d80a03d17cd3ac7f80f0555a50f9508688d0fa64faa1fac57cd75d34d49b675ce583ecd4d27a365099151956b2e9e01acecb68b1c00f4895db7e18

    • SSDEEP

      24576:8KB0TXQTNjx+mZCkt76f/24pN+XNqNG6hditW:h0TYf9Ckt7c20+9qNxUW

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks