General

  • Target

    f96a1ae4e971d30614783829af0ad04cc79b4944989543e99ceecbf29159eb88

  • Size

    1.7MB

  • Sample

    240919-gtxcgsthka

  • MD5

    8287d3b7e74a57304d3fc5843193cbb8

  • SHA1

    b11d2d0364325e8aa12bb8a115aed37307c5ae43

  • SHA256

    f96a1ae4e971d30614783829af0ad04cc79b4944989543e99ceecbf29159eb88

  • SHA512

    84321c587091ed3e8e5866cf7ff493b5d82e81aec3c1561e5be7912c759b519316a9ba4187b6c32e5c5f0a1a6f4e96a23b9dd9516630cea9f394fd930d72dfaf

  • SSDEEP

    49152:yKxNupkTcKb4rSUfkVFjbaB0zj0yjoB2:7fupkT5NUQoB2Yyjl

Malware Config

Targets

    • Target

      f96a1ae4e971d30614783829af0ad04cc79b4944989543e99ceecbf29159eb88

    • Size

      1.7MB

    • MD5

      8287d3b7e74a57304d3fc5843193cbb8

    • SHA1

      b11d2d0364325e8aa12bb8a115aed37307c5ae43

    • SHA256

      f96a1ae4e971d30614783829af0ad04cc79b4944989543e99ceecbf29159eb88

    • SHA512

      84321c587091ed3e8e5866cf7ff493b5d82e81aec3c1561e5be7912c759b519316a9ba4187b6c32e5c5f0a1a6f4e96a23b9dd9516630cea9f394fd930d72dfaf

    • SSDEEP

      49152:yKxNupkTcKb4rSUfkVFjbaB0zj0yjoB2:7fupkT5NUQoB2Yyjl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks