General

  • Target

    21d51819cefab4b4d0ff4ba18e105480N.exe

  • Size

    1.3MB

  • Sample

    240801-31cgjsyblc

  • MD5

    21d51819cefab4b4d0ff4ba18e105480

  • SHA1

    83bd019fca7972dfa4377d086d6744900bebc991

  • SHA256

    647b396fe931c059aa6c4d170e1d3aca915327662a93962e5665a5bc217fe3cf

  • SHA512

    0eaea8ce9790bd818f15afeb10d8c86bcaff6ed7fce4b390eb4cef65fd4b6b60bcf0db39c22a695357393b9a109e8e5df94ca1c8d66ac33b158860580929e74c

  • SSDEEP

    24576:tvIBwtW/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:tvILLNiXicJFFRGNzj3

Malware Config

Targets

    • Target

      21d51819cefab4b4d0ff4ba18e105480N.exe

    • Size

      1.3MB

    • MD5

      21d51819cefab4b4d0ff4ba18e105480

    • SHA1

      83bd019fca7972dfa4377d086d6744900bebc991

    • SHA256

      647b396fe931c059aa6c4d170e1d3aca915327662a93962e5665a5bc217fe3cf

    • SHA512

      0eaea8ce9790bd818f15afeb10d8c86bcaff6ed7fce4b390eb4cef65fd4b6b60bcf0db39c22a695357393b9a109e8e5df94ca1c8d66ac33b158860580929e74c

    • SSDEEP

      24576:tvIBwtW/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:tvILLNiXicJFFRGNzj3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks