Resubmissions

05/10/2024, 14:52

241005-r81csszekf9

20/08/2024, 13:23

240820-qm5jystfpc9

General

  • Target
    Morgan.exe
  • Size 14KB
  • Sample240820-qm5jystfpc
  • SHA256 17db6fd9f81222711b1f33983a8f64b8c3bddfc7dc25f4f6b6e0c6c29d877eeb
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      Morgan.exe
    • Size 14KB
    • SHA256 17db6fd9f81222711b1f33983a8f64b8c3bddfc7dc25f4f6b6e0c6c29d877eeb
    • MD5 SHA1 SHA512 SSDEEP
    • Renames multiple (295) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks