General

  • Target

    edc09332e2a576f264f7db358f204620N.exe

  • Size

    1.5MB

  • Sample

    240823-dqqtraselg

  • MD5

    edc09332e2a576f264f7db358f204620

  • SHA1

    5dfc59888344c4f2c72ad8d17dacf8eca7bcbbbb

  • SHA256

    36fe5224237234b3ebf9af138bc63b121ccce84261a9260d837d9545aa46fc65

  • SHA512

    e082b60bd80c1f3c7ca3dd8fe4bb3f0322415012f17b58bdbebc1a7d1198662d27eeebcf0ab338ffc3daff2ca9b996b97434a666ad0a353a373feecb1cf81862

  • SSDEEP

    24576:Zz2DWtCks7WE9F5pwg8zmdqQjC60jiHkU:nCks7R9L58UqFJjskU

Malware Config

Targets

    • Target

      edc09332e2a576f264f7db358f204620N.exe

    • Size

      1.5MB

    • MD5

      edc09332e2a576f264f7db358f204620

    • SHA1

      5dfc59888344c4f2c72ad8d17dacf8eca7bcbbbb

    • SHA256

      36fe5224237234b3ebf9af138bc63b121ccce84261a9260d837d9545aa46fc65

    • SHA512

      e082b60bd80c1f3c7ca3dd8fe4bb3f0322415012f17b58bdbebc1a7d1198662d27eeebcf0ab338ffc3daff2ca9b996b97434a666ad0a353a373feecb1cf81862

    • SSDEEP

      24576:Zz2DWtCks7WE9F5pwg8zmdqQjC60jiHkU:nCks7R9L58UqFJjskU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks