General

  • Target

    f411335b90a998cb1ba0483680ed3e90N.exe

  • Size

    1.5MB

  • Sample

    240820-xy39layenh

  • MD5

    f411335b90a998cb1ba0483680ed3e90

  • SHA1

    69a5e902399b1e2168b2151cefe151c8f758868d

  • SHA256

    43279195deb2632f10a5fdc742538af4e3d5c7e9354fc76d6b2d39e880b8f096

  • SHA512

    8c7a1a4981eab076b9832f8e8ba3e5d050bd99d621c02d3ccf8603038e939118073ba6627e1fd72b01e53adbd04422a4752eee6bcd2fc8a94026b09a8293b6da

  • SSDEEP

    12288:Jj9OGmCd0Un0pIYwHg0PXhKQ8rh9gMrufZBDpgAgDP2HotY:F493U0XwHg8wv9aTHgiI

Malware Config

Targets

    • Target

      f411335b90a998cb1ba0483680ed3e90N.exe

    • Size

      1.5MB

    • MD5

      f411335b90a998cb1ba0483680ed3e90

    • SHA1

      69a5e902399b1e2168b2151cefe151c8f758868d

    • SHA256

      43279195deb2632f10a5fdc742538af4e3d5c7e9354fc76d6b2d39e880b8f096

    • SHA512

      8c7a1a4981eab076b9832f8e8ba3e5d050bd99d621c02d3ccf8603038e939118073ba6627e1fd72b01e53adbd04422a4752eee6bcd2fc8a94026b09a8293b6da

    • SSDEEP

      12288:Jj9OGmCd0Un0pIYwHg0PXhKQ8rh9gMrufZBDpgAgDP2HotY:F493U0XwHg8wv9aTHgiI

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks