General

  • Target

    300fc1c11535cee14f42a8b0572f0166b4d4c2f0e3c760ef6f7195f328925a70

  • Size

    1.7MB

  • Sample

    240915-e3ta3swaqh

  • MD5

    1e2bf7afcd0569cfad72ce427d38713e

  • SHA1

    ef12064914960a7c33d8d910c1cee918088e99c2

  • SHA256

    300fc1c11535cee14f42a8b0572f0166b4d4c2f0e3c760ef6f7195f328925a70

  • SHA512

    feabecb0a4ac506fc293fd5dc8c74cb648d1b6bdff3b3a99f0b6cd20f07877bf429566569652ba68cd134f4e8d2b1e7c21baa76a8041115fecc9fb05f5204803

  • SSDEEP

    49152:pKxNupkTcKb4rSUfkVFja0DGPU9V4Y8mD:AfupkT5NUQM0vV4Y8w

Malware Config

Targets

    • Target

      300fc1c11535cee14f42a8b0572f0166b4d4c2f0e3c760ef6f7195f328925a70

    • Size

      1.7MB

    • MD5

      1e2bf7afcd0569cfad72ce427d38713e

    • SHA1

      ef12064914960a7c33d8d910c1cee918088e99c2

    • SHA256

      300fc1c11535cee14f42a8b0572f0166b4d4c2f0e3c760ef6f7195f328925a70

    • SHA512

      feabecb0a4ac506fc293fd5dc8c74cb648d1b6bdff3b3a99f0b6cd20f07877bf429566569652ba68cd134f4e8d2b1e7c21baa76a8041115fecc9fb05f5204803

    • SSDEEP

      49152:pKxNupkTcKb4rSUfkVFja0DGPU9V4Y8mD:AfupkT5NUQM0vV4Y8w

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks