General

  • Target

    2024-09-19_b2995bdd13ec8b1c4454cdf29eca271c_avoslocker_revil

  • Size

    3.5MB

  • Sample

    240919-g8xa2avgpj

  • MD5

    b2995bdd13ec8b1c4454cdf29eca271c

  • SHA1

    eddd624510d93ef48775b94712a3128f2cf03c43

  • SHA256

    29e2549eceba494fae832256ff708abbfe6cb41083260fab5b0e237af618854f

  • SHA512

    0f0c0b5762b5a10370918b4c477c565653398850a491a7679e742435ffe2ab98427725d1cd9249a13eb1f1941a624186a96df4e5206663476c2eab9c4819d022

  • SSDEEP

    49152:BOvvVoQqdMSxRGOFQ2DqHp4NhANdYkutPyNnxmukzgm+ZTe+3ZSJ00zRt2vVyt+p:BOvvaQqLGkQtHpuh8umnxZm+Zu2vXtZ

Malware Config

Targets

    • Target

      2024-09-19_b2995bdd13ec8b1c4454cdf29eca271c_avoslocker_revil

    • Size

      3.5MB

    • MD5

      b2995bdd13ec8b1c4454cdf29eca271c

    • SHA1

      eddd624510d93ef48775b94712a3128f2cf03c43

    • SHA256

      29e2549eceba494fae832256ff708abbfe6cb41083260fab5b0e237af618854f

    • SHA512

      0f0c0b5762b5a10370918b4c477c565653398850a491a7679e742435ffe2ab98427725d1cd9249a13eb1f1941a624186a96df4e5206663476c2eab9c4819d022

    • SSDEEP

      49152:BOvvVoQqdMSxRGOFQ2DqHp4NhANdYkutPyNnxmukzgm+ZTe+3ZSJ00zRt2vVyt+p:BOvvaQqLGkQtHpuh8umnxZm+Zu2vXtZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks