General

  • Target

    bb53833e0e45295978c94e0860e610b0N.exe

  • Size

    1.5MB

  • Sample

    240727-m88xqayhpd

  • MD5

    bb53833e0e45295978c94e0860e610b0

  • SHA1

    e6d1e8402ff805f5d0c26ef51c282b021b416f7e

  • SHA256

    b425b07c2b7235e33e6111626aec42d7d7bf94efbe7c02921f86e5420acb7a73

  • SHA512

    554744a2d7f63f1a9038da1e8fbe63adbdad1e1b741271906a92a0ead62e84f41e4cfaff70aee826bd1172ac9cbc83194cefd6c2b94a62dcbcf41caeee085b18

  • SSDEEP

    24576:cUhiHOeo8rin3thLgc+pFB5z+//ufNRoZW:XhiHprothL1+pFzz+/2fNR

Malware Config

Targets

    • Target

      bb53833e0e45295978c94e0860e610b0N.exe

    • Size

      1.5MB

    • MD5

      bb53833e0e45295978c94e0860e610b0

    • SHA1

      e6d1e8402ff805f5d0c26ef51c282b021b416f7e

    • SHA256

      b425b07c2b7235e33e6111626aec42d7d7bf94efbe7c02921f86e5420acb7a73

    • SHA512

      554744a2d7f63f1a9038da1e8fbe63adbdad1e1b741271906a92a0ead62e84f41e4cfaff70aee826bd1172ac9cbc83194cefd6c2b94a62dcbcf41caeee085b18

    • SSDEEP

      24576:cUhiHOeo8rin3thLgc+pFB5z+//ufNRoZW:XhiHprothL1+pFzz+/2fNR

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks