General

  • Target

    4c489616cd6414b81f37ae3cefc72d70N.exe

  • Size

    872KB

  • Sample

    240814-nr9clazepe

  • MD5

    4c489616cd6414b81f37ae3cefc72d70

  • SHA1

    327e3bb515a245e1a5ecac431210e4f36f87947e

  • SHA256

    f90791edc91ec613b595496e538fddcd0eab9b45614615bc5f8efca408e3ee3f

  • SHA512

    3d0461a701856002e7f1aedf01ccc55025e114121d64515b8f2b68ff0f5c990e0ff143a2805a95c3a182f94ade1722a2d99a8f2617c394bc0403e2842a4d9274

  • SSDEEP

    24576:mbQLHpaN7j9ewso7aItMHqDeGJ6vUy7WuqpLl:G/N7joEqKLcsNua

Malware Config

Targets

    • Target

      4c489616cd6414b81f37ae3cefc72d70N.exe

    • Size

      872KB

    • MD5

      4c489616cd6414b81f37ae3cefc72d70

    • SHA1

      327e3bb515a245e1a5ecac431210e4f36f87947e

    • SHA256

      f90791edc91ec613b595496e538fddcd0eab9b45614615bc5f8efca408e3ee3f

    • SHA512

      3d0461a701856002e7f1aedf01ccc55025e114121d64515b8f2b68ff0f5c990e0ff143a2805a95c3a182f94ade1722a2d99a8f2617c394bc0403e2842a4d9274

    • SSDEEP

      24576:mbQLHpaN7j9ewso7aItMHqDeGJ6vUy7WuqpLl:G/N7joEqKLcsNua

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks for any installed AV software in registry

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks