General

  • Target

    529a41cd-5c0c-4cd0-8061-b71feaa8a336

  • Size

    164.6MB

  • Sample

    240810-r4hl7axhqd

  • MD5

    11e4eb3b3c34f48d72230928953cf8af

  • SHA1

    f27b5f891d2fa49c38a4a7f648a214297e63a277

  • SHA256

    c57ebe60385417074c0a168cc79ebe356038206199117852a0fb0afeb550c789

  • SHA512

    82f38356e0c065821dc8e8df2b92ad71530c59ac542c4e81cf61878d1df6ebbe658f6bb21645251705604ea4818ccecf927efaf842595feaf7d8426ad5f5ca92

  • SSDEEP

    3145728:NJrPQ9xczROdBB1tmAHPg51Ol4QbgMO4tAykxRIi/jNGOzCG9T:NJrPQssdT1tmAHPQ1OCsglakxRF/RGOv

Malware Config

Targets

    • Target

      529a41cd-5c0c-4cd0-8061-b71feaa8a336

    • Size

      164.6MB

    • MD5

      11e4eb3b3c34f48d72230928953cf8af

    • SHA1

      f27b5f891d2fa49c38a4a7f648a214297e63a277

    • SHA256

      c57ebe60385417074c0a168cc79ebe356038206199117852a0fb0afeb550c789

    • SHA512

      82f38356e0c065821dc8e8df2b92ad71530c59ac542c4e81cf61878d1df6ebbe658f6bb21645251705604ea4818ccecf927efaf842595feaf7d8426ad5f5ca92

    • SSDEEP

      3145728:NJrPQ9xczROdBB1tmAHPg51Ol4QbgMO4tAykxRIi/jNGOzCG9T:NJrPQssdT1tmAHPQ1OCsglakxRF/RGOv

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks