General

  • Target

    eb97052899bb8e9d32865a2b3269122252942286618387278279d792b13dfd72

  • Size

    8.5MB

  • Sample

    240925-d3m9dssfjp

  • MD5

    8d53eb752c4c26795c3cc334c9a64611

  • SHA1

    f1a3d4a4a1110d616ad82bdb64d98b011adc00c7

  • SHA256

    eb97052899bb8e9d32865a2b3269122252942286618387278279d792b13dfd72

  • SHA512

    f501f8eee32ec863aa061be6fe07e382e38adeaa20b110792310f457af4591dec289145a7f10b6aa5023d5143e773312c5c5a4c078286d8604feb689db288e99

  • SSDEEP

    196608:qa+ZIGwdfbWgPfZ0nwsiBOCaepkvxEcBqc2xHFJLc04ylx40tk:mZIGwdfjhTsigHvxE9c2xH/crylx402

Malware Config

Targets

    • Target

      eb97052899bb8e9d32865a2b3269122252942286618387278279d792b13dfd72

    • Size

      8.5MB

    • MD5

      8d53eb752c4c26795c3cc334c9a64611

    • SHA1

      f1a3d4a4a1110d616ad82bdb64d98b011adc00c7

    • SHA256

      eb97052899bb8e9d32865a2b3269122252942286618387278279d792b13dfd72

    • SHA512

      f501f8eee32ec863aa061be6fe07e382e38adeaa20b110792310f457af4591dec289145a7f10b6aa5023d5143e773312c5c5a4c078286d8604feb689db288e99

    • SSDEEP

      196608:qa+ZIGwdfbWgPfZ0nwsiBOCaepkvxEcBqc2xHFJLc04ylx40tk:mZIGwdfjhTsigHvxE9c2xH/crylx402

    • An open source browser data exporter written in golang.

    • HackBrowserData

      An open source golang web browser extractor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks