General

  • Target

    9877182399040eda85c496708b91e8f0N.exe

  • Size

    625KB

  • Sample

    240817-ksy2gaxcqa

  • MD5

    9877182399040eda85c496708b91e8f0

  • SHA1

    56d01eee26f59e321b6e67e3389d4f54acb75948

  • SHA256

    d24a4d9208f89b1306d437aab0fd70a8af0c34e4bd214bcaac73fa9ba6cbc533

  • SHA512

    888a839c13b277ad524267fd863f9405a950ab2494aa45388aacc32efbb5e629d302122d8b9616a0634ee00d1c830e7ff3ced298dd43f174d0619126eb3863c1

  • SSDEEP

    12288:+2xGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:b0t/sBlDqgZQd6XKtiMJYiPU

Malware Config

Targets

    • Target

      9877182399040eda85c496708b91e8f0N.exe

    • Size

      625KB

    • MD5

      9877182399040eda85c496708b91e8f0

    • SHA1

      56d01eee26f59e321b6e67e3389d4f54acb75948

    • SHA256

      d24a4d9208f89b1306d437aab0fd70a8af0c34e4bd214bcaac73fa9ba6cbc533

    • SHA512

      888a839c13b277ad524267fd863f9405a950ab2494aa45388aacc32efbb5e629d302122d8b9616a0634ee00d1c830e7ff3ced298dd43f174d0619126eb3863c1

    • SSDEEP

      12288:+2xGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:b0t/sBlDqgZQd6XKtiMJYiPU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks