General

  • Target

    2d89f09f282b1fa88516b2f3bf0ec18049474789013b01d8cdbed803fa58dad6

  • Size

    1.8MB

  • Sample

    240824-v621ds1fre

  • MD5

    3a3448e01fc90daab3478882630e39fb

  • SHA1

    5bcfebffa9c74243751d15f877ff5d9fce713044

  • SHA256

    2d89f09f282b1fa88516b2f3bf0ec18049474789013b01d8cdbed803fa58dad6

  • SHA512

    c14181b0c1a658813c5e09fce7b23eb012a5a2aacb2a19c77d4221658237797d48ef42c876f0410423fa39decc1fa027e90ea59a3c9f12937f81d00cb12f1d63

  • SSDEEP

    49152:xM9QPdxwfE7WlFwKAfzuTiDFUFk4/snji6attJM:x1PdVQFwKZCFgJEnW6at

Malware Config

Targets

    • Target

      2d89f09f282b1fa88516b2f3bf0ec18049474789013b01d8cdbed803fa58dad6

    • Size

      1.8MB

    • MD5

      3a3448e01fc90daab3478882630e39fb

    • SHA1

      5bcfebffa9c74243751d15f877ff5d9fce713044

    • SHA256

      2d89f09f282b1fa88516b2f3bf0ec18049474789013b01d8cdbed803fa58dad6

    • SHA512

      c14181b0c1a658813c5e09fce7b23eb012a5a2aacb2a19c77d4221658237797d48ef42c876f0410423fa39decc1fa027e90ea59a3c9f12937f81d00cb12f1d63

    • SSDEEP

      49152:xM9QPdxwfE7WlFwKAfzuTiDFUFk4/snji6attJM:x1PdVQFwKZCFgJEnW6at

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks