General

  • Target

    411d75fd4641c2a1d54d46f5d6f142a28f744f9e22d478509027550567e9605a

  • Size

    1.7MB

  • Sample

    240919-pr2hesygqn

  • MD5

    b20e54d8b716df8d395a55d4711ffac0

  • SHA1

    30354618a279b79d4955c7946e1ebeed8eda8218

  • SHA256

    411d75fd4641c2a1d54d46f5d6f142a28f744f9e22d478509027550567e9605a

  • SHA512

    cc8019f818c9c00c155241943ec62ab6af45d0c50ae7bc0ee9f0decc697a912e838d5ae57520fc79148bd2dc19762916bbece2338f773bc7f588a7962a93bdda

  • SSDEEP

    49152:GKxNupkTcKb4rSUfkVFjsaB0zj0yjoB2:ffupkT5NUQFB2Yyjl

Malware Config

Targets

    • Target

      411d75fd4641c2a1d54d46f5d6f142a28f744f9e22d478509027550567e9605a

    • Size

      1.7MB

    • MD5

      b20e54d8b716df8d395a55d4711ffac0

    • SHA1

      30354618a279b79d4955c7946e1ebeed8eda8218

    • SHA256

      411d75fd4641c2a1d54d46f5d6f142a28f744f9e22d478509027550567e9605a

    • SHA512

      cc8019f818c9c00c155241943ec62ab6af45d0c50ae7bc0ee9f0decc697a912e838d5ae57520fc79148bd2dc19762916bbece2338f773bc7f588a7962a93bdda

    • SSDEEP

      49152:GKxNupkTcKb4rSUfkVFjsaB0zj0yjoB2:ffupkT5NUQFB2Yyjl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks