General

  • Target

    3d79cff5140eac881e2a97538cc17e50N.exe

  • Size

    1.3MB

  • Sample

    240816-2v2c2swbql

  • MD5

    3d79cff5140eac881e2a97538cc17e50

  • SHA1

    501268c199114aeeea88661fd7d1ef5298b5dee3

  • SHA256

    8a4f1cf74344a4556d0df015b99aecfc957f90785e3f57cf25450c01d672a1a6

  • SHA512

    7f11817ab469b3bd4f5d7380d0a45c8e6335f37f2f4725fdc991fede15d7feb040cae485dffcb7597ed282114a0645486895003877e830c366dda382167b7a46

  • SSDEEP

    12288:FoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:G2JOt934J7Z6bQaj1BvUm9J

Malware Config

Targets

    • Target

      3d79cff5140eac881e2a97538cc17e50N.exe

    • Size

      1.3MB

    • MD5

      3d79cff5140eac881e2a97538cc17e50

    • SHA1

      501268c199114aeeea88661fd7d1ef5298b5dee3

    • SHA256

      8a4f1cf74344a4556d0df015b99aecfc957f90785e3f57cf25450c01d672a1a6

    • SHA512

      7f11817ab469b3bd4f5d7380d0a45c8e6335f37f2f4725fdc991fede15d7feb040cae485dffcb7597ed282114a0645486895003877e830c366dda382167b7a46

    • SSDEEP

      12288:FoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:G2JOt934J7Z6bQaj1BvUm9J

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks