General

  • Target

    c43c5a4906252af7ddebf9f13981eb8527c5e81cb429efd77ea2ffb8ce39eb06

  • Size

    1.8MB

  • Sample

    240820-jh25psthjr

  • MD5

    9295fbf98a7a4cebe967b5a19092cb84

  • SHA1

    89923c6ad9aecc11ab538762496059d5bf11d08d

  • SHA256

    c43c5a4906252af7ddebf9f13981eb8527c5e81cb429efd77ea2ffb8ce39eb06

  • SHA512

    b06ad89c6183bc728293dbb127132ccc411a1f6db483b27149e6042fec266bb20e053133d76a1f03a89df8a9bc0a03d27a1aebcdfce818725be56872d7c0c984

  • SSDEEP

    49152:GM9QPdxwfE7WlFwKAfzuTiDFUFkUIpuRruSJG:G1PdVQFwKZCFgfIpwuS

Malware Config

Targets

    • Target

      c43c5a4906252af7ddebf9f13981eb8527c5e81cb429efd77ea2ffb8ce39eb06

    • Size

      1.8MB

    • MD5

      9295fbf98a7a4cebe967b5a19092cb84

    • SHA1

      89923c6ad9aecc11ab538762496059d5bf11d08d

    • SHA256

      c43c5a4906252af7ddebf9f13981eb8527c5e81cb429efd77ea2ffb8ce39eb06

    • SHA512

      b06ad89c6183bc728293dbb127132ccc411a1f6db483b27149e6042fec266bb20e053133d76a1f03a89df8a9bc0a03d27a1aebcdfce818725be56872d7c0c984

    • SSDEEP

      49152:GM9QPdxwfE7WlFwKAfzuTiDFUFkUIpuRruSJG:G1PdVQFwKZCFgfIpwuS

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks