General

  • Target

    f09ab90191c3efe3b9ff04dcc0801220N.exe

  • Size

    1.3MB

  • Sample

    240909-k7r7ga1bmp

  • MD5

    f09ab90191c3efe3b9ff04dcc0801220

  • SHA1

    1abaca481fc42dd0fc8690c5bf9cff3df2f8d7c6

  • SHA256

    86648c521561c256143da24298fdb44ec2a3354eb6eee2c9bb3612312b8f5632

  • SHA512

    55dbbb741ebf897cfdcac645b2aad107ea98e77109bbec9d61d93976f1f485b9ed3d5130ab051aba848e4b190f35ae2d05d0ebb66981345b50dcbbf0a0d6b5e4

  • SSDEEP

    12288:7utu7Hw1KS+kj2s+7u3bVa3w6LXLXkWUKElgYwKz:7uMyKS+w3U3pb4WUKEjf

Malware Config

Targets

    • Target

      f09ab90191c3efe3b9ff04dcc0801220N.exe

    • Size

      1.3MB

    • MD5

      f09ab90191c3efe3b9ff04dcc0801220

    • SHA1

      1abaca481fc42dd0fc8690c5bf9cff3df2f8d7c6

    • SHA256

      86648c521561c256143da24298fdb44ec2a3354eb6eee2c9bb3612312b8f5632

    • SHA512

      55dbbb741ebf897cfdcac645b2aad107ea98e77109bbec9d61d93976f1f485b9ed3d5130ab051aba848e4b190f35ae2d05d0ebb66981345b50dcbbf0a0d6b5e4

    • SSDEEP

      12288:7utu7Hw1KS+kj2s+7u3bVa3w6LXLXkWUKElgYwKz:7uMyKS+w3U3pb4WUKEjf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks