Resubmissions

10/08/2024, 16:51

240810-vdbbzasekh 9

10/08/2024, 16:46

240810-t97vdayarq 9

General

  • Target

    Fast_set-up.exe

  • Size

    2.5MB

  • Sample

    240810-t97vdayarq

  • MD5

    381ace042ca4d57e4e17e18287112bcb

  • SHA1

    b8fa3246781f0f6e09edd20ba0363e5cb804ee8f

  • SHA256

    121d31736e140b3bb219f9d12c532445041dd83c0d80e3383122f8efb517962c

  • SHA512

    08836a068de6661db378c996c172dee3c848cfab8c0d6054117e6e06668e67cd6e75ba153c7f9da56f97fc889d14b827cc3a6fd1298423e332ab4e09315e2d7a

  • SSDEEP

    49152:jCNxvbviLOyqSBX+6ngU8xrBvw8PmRq+jeO1:uNNObqPmRq+jt

Malware Config

Targets

    • Target

      Fast_set-up.exe

    • Size

      2.5MB

    • MD5

      381ace042ca4d57e4e17e18287112bcb

    • SHA1

      b8fa3246781f0f6e09edd20ba0363e5cb804ee8f

    • SHA256

      121d31736e140b3bb219f9d12c532445041dd83c0d80e3383122f8efb517962c

    • SHA512

      08836a068de6661db378c996c172dee3c848cfab8c0d6054117e6e06668e67cd6e75ba153c7f9da56f97fc889d14b827cc3a6fd1298423e332ab4e09315e2d7a

    • SSDEEP

      49152:jCNxvbviLOyqSBX+6ngU8xrBvw8PmRq+jeO1:uNNObqPmRq+jt

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks