General

  • Target

    23f8954f7345244de3232bca7474a62846dca1b50f8ddf481a4cd759a716113c.exe

  • Size

    492KB

  • Sample

    240821-lxy3pssane

  • MD5

    d4e8d1e4ba215265ca1fdd24c9ed3f7f

  • SHA1

    d276972ea6df9ee66b627890fb14d04990b0f489

  • SHA256

    23f8954f7345244de3232bca7474a62846dca1b50f8ddf481a4cd759a716113c

  • SHA512

    9112099a87575f023daca27d55c0a00dae0f3ef01d8d4d554354be3d6e59e83033cd8dd118d3b42ebaa7a8657d81e92f4a7cc558a3c966bc69bcdcb26a381de8

  • SSDEEP

    12288:c7O9rxIYciU8IrKU/NwZRFFU60vgn4xNAbCTUmi:Y+SYhSrKU/mTFZnnqNAbCT

Malware Config

Targets

    • Target

      23f8954f7345244de3232bca7474a62846dca1b50f8ddf481a4cd759a716113c.exe

    • Size

      492KB

    • MD5

      d4e8d1e4ba215265ca1fdd24c9ed3f7f

    • SHA1

      d276972ea6df9ee66b627890fb14d04990b0f489

    • SHA256

      23f8954f7345244de3232bca7474a62846dca1b50f8ddf481a4cd759a716113c

    • SHA512

      9112099a87575f023daca27d55c0a00dae0f3ef01d8d4d554354be3d6e59e83033cd8dd118d3b42ebaa7a8657d81e92f4a7cc558a3c966bc69bcdcb26a381de8

    • SSDEEP

      12288:c7O9rxIYciU8IrKU/NwZRFFU60vgn4xNAbCTUmi:Y+SYhSrKU/mTFZnnqNAbCT

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks