General

  • Target

    1e635dfc2f1a09ee37318c8a4b82e610N

  • Size

    1.4MB

  • Sample

    240911-erqqtasgpb

  • MD5

    1e635dfc2f1a09ee37318c8a4b82e610

  • SHA1

    2d120170fe637d303e7d3170436d49cecd4d7231

  • SHA256

    23f43e4151b51424e10b9f7d3ac489a7642bbe6a2092e67e9b55a26549f0612d

  • SHA512

    66d0c785d405850d570373f642285b538251c0a979d406f019bd02ca53c1257c4b1ef12db6511ad5b0747cd654bcb36d29b56e06359779ed8f6984c663dd6b2a

  • SSDEEP

    12288:H3FJbk5jJ3mnHdSwM+fMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:XuiNM+0SkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      1e635dfc2f1a09ee37318c8a4b82e610N

    • Size

      1.4MB

    • MD5

      1e635dfc2f1a09ee37318c8a4b82e610

    • SHA1

      2d120170fe637d303e7d3170436d49cecd4d7231

    • SHA256

      23f43e4151b51424e10b9f7d3ac489a7642bbe6a2092e67e9b55a26549f0612d

    • SHA512

      66d0c785d405850d570373f642285b538251c0a979d406f019bd02ca53c1257c4b1ef12db6511ad5b0747cd654bcb36d29b56e06359779ed8f6984c663dd6b2a

    • SSDEEP

      12288:H3FJbk5jJ3mnHdSwM+fMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:XuiNM+0SkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks