General

  • Target

    04ab3c541988e72f45f21ee3ce44f480N.exe

  • Size

    655KB

  • Sample

    240806-zlyjpatenf

  • MD5

    04ab3c541988e72f45f21ee3ce44f480

  • SHA1

    ba91932e1e706740f9234142bf5ea6b32524373c

  • SHA256

    fb16a123a57459a84409da9a0fe826210f4d83551e4efb3b3248972fbfefa209

  • SHA512

    212d8a2b32ddaa5bd306346637e2146ef26fd32135ae887bc32af3a185f6876a9f08db616372792fad7dba6d4a37204831d3452ec43c679f47863c8a5bb0c392

  • SSDEEP

    12288:f3J3Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:f5Hofe3y1sInB2COzRq8DvFqt

Malware Config

Targets

    • Target

      04ab3c541988e72f45f21ee3ce44f480N.exe

    • Size

      655KB

    • MD5

      04ab3c541988e72f45f21ee3ce44f480

    • SHA1

      ba91932e1e706740f9234142bf5ea6b32524373c

    • SHA256

      fb16a123a57459a84409da9a0fe826210f4d83551e4efb3b3248972fbfefa209

    • SHA512

      212d8a2b32ddaa5bd306346637e2146ef26fd32135ae887bc32af3a185f6876a9f08db616372792fad7dba6d4a37204831d3452ec43c679f47863c8a5bb0c392

    • SSDEEP

      12288:f3J3Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:f5Hofe3y1sInB2COzRq8DvFqt

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks