General

  • Target

    c829d1daf97d4adb28a1b5e225c7c500N.exe

  • Size

    648KB

  • Sample

    240802-yj9nhasflb

  • MD5

    c829d1daf97d4adb28a1b5e225c7c500

  • SHA1

    1a2a0fd67950f04b69ed973809537ba22180a2d9

  • SHA256

    b8029ee2730e371b434ee1ffb74ddaa6f69d1bea90682920e2b3b139597fef13

  • SHA512

    a7a1d4ec29131f575bd0885ce8bbe6d7969da865c9316b714b04ee6580e970254f7d4c6ad936df3ccfcac28d67735e283d612f643d4fc0adc8a82df623e09cc1

  • SSDEEP

    12288:Hqz2DWUqINk7k14+gYZ5UaiAPqF0JZI4GPnmNbIQ/qDJSgCmP8i/:Kz2DWck7SgdEPi7PnmNbJ/UUgCY

Malware Config

Targets

    • Target

      c829d1daf97d4adb28a1b5e225c7c500N.exe

    • Size

      648KB

    • MD5

      c829d1daf97d4adb28a1b5e225c7c500

    • SHA1

      1a2a0fd67950f04b69ed973809537ba22180a2d9

    • SHA256

      b8029ee2730e371b434ee1ffb74ddaa6f69d1bea90682920e2b3b139597fef13

    • SHA512

      a7a1d4ec29131f575bd0885ce8bbe6d7969da865c9316b714b04ee6580e970254f7d4c6ad936df3ccfcac28d67735e283d612f643d4fc0adc8a82df623e09cc1

    • SSDEEP

      12288:Hqz2DWUqINk7k14+gYZ5UaiAPqF0JZI4GPnmNbIQ/qDJSgCmP8i/:Kz2DWck7SgdEPi7PnmNbJ/UUgCY

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks