General

  • Target

    b879f9a23d06dc5f3b773f5a89a53400N

  • Size

    1.2MB

  • Sample

    240913-1eqe6szenp

  • MD5

    b879f9a23d06dc5f3b773f5a89a53400

  • SHA1

    0a7761eaa34fab56d044b4b54c12c932166054a8

  • SHA256

    a4489a7af636ab30fe0a2e82283579f7f2a36b3a1d7871033d4139f19a47346c

  • SHA512

    69ae09ed379a28c94c0ca58b753811acadbce3d8451825ade01f897204a5fdd34090b35ea58967a68f6674d559e8184e92cc22ecac490850b9199aa16699d878

  • SSDEEP

    12288:OJLXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:kLsqjnhMgeiCl7G0nehbGZpbD

Malware Config

Targets

    • Target

      b879f9a23d06dc5f3b773f5a89a53400N

    • Size

      1.2MB

    • MD5

      b879f9a23d06dc5f3b773f5a89a53400

    • SHA1

      0a7761eaa34fab56d044b4b54c12c932166054a8

    • SHA256

      a4489a7af636ab30fe0a2e82283579f7f2a36b3a1d7871033d4139f19a47346c

    • SHA512

      69ae09ed379a28c94c0ca58b753811acadbce3d8451825ade01f897204a5fdd34090b35ea58967a68f6674d559e8184e92cc22ecac490850b9199aa16699d878

    • SSDEEP

      12288:OJLXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:kLsqjnhMgeiCl7G0nehbGZpbD

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks