General

  • Target

    07505b6673181e617bd94cc8879c5bf0N.exe

  • Size

    1.2MB

  • Sample

    240914-bgc57ayerl

  • MD5

    07505b6673181e617bd94cc8879c5bf0

  • SHA1

    11f861c0ffa423b3c9028dcbc6eb3bb52dceb9c1

  • SHA256

    b16309189bab5e7c50961f2cf0ba6af68e2047331f356d1ff5e0fe8601fd6d20

  • SHA512

    ecb1c6a6a57133c0ccf1077480f89a82aabd97196887ae82b817257a4292d58a8401960dc21cda5a1bb9413101d5addca22a3cd1a1bd6feab609b28f958da30e

  • SSDEEP

    12288:wgb2RbK1JeYBIMIByiMUstAsf8NIdY6CermIFmz0:wgCukYBI1ByiM9tAskNmY6CermKq

Malware Config

Targets

    • Target

      07505b6673181e617bd94cc8879c5bf0N.exe

    • Size

      1.2MB

    • MD5

      07505b6673181e617bd94cc8879c5bf0

    • SHA1

      11f861c0ffa423b3c9028dcbc6eb3bb52dceb9c1

    • SHA256

      b16309189bab5e7c50961f2cf0ba6af68e2047331f356d1ff5e0fe8601fd6d20

    • SHA512

      ecb1c6a6a57133c0ccf1077480f89a82aabd97196887ae82b817257a4292d58a8401960dc21cda5a1bb9413101d5addca22a3cd1a1bd6feab609b28f958da30e

    • SSDEEP

      12288:wgb2RbK1JeYBIMIByiMUstAsf8NIdY6CermIFmz0:wgCukYBI1ByiM9tAskNmY6CermKq

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks