General

  • Target

    a5a049f33d89b6e1a8c5ee60024790b81cee3a268806946182bde58bb7e75fe2

  • Size

    3.5MB

  • Sample

    240927-h4dhsstgmc

  • MD5

    809a5fbe1e7a8d2dd549ef5698ac052b

  • SHA1

    7cb0bb11dc346f5dd839b65dbfc074a0d6741424

  • SHA256

    a5a049f33d89b6e1a8c5ee60024790b81cee3a268806946182bde58bb7e75fe2

  • SHA512

    7630994dcbf3ec982d15c39d851b13d188e0ea6671b2840d07128fb8beebb5bd710cbd25c9d556227350c0145e6b2361c96977f115dc2ce2eaa86ce6cc148dcc

  • SSDEEP

    98304:ZbClxzauMBi9py/2hTjeDrW6a0nsr6UbN:ZGlIBaReDrWpeUb

Malware Config

Targets

    • Target

      a5a049f33d89b6e1a8c5ee60024790b81cee3a268806946182bde58bb7e75fe2

    • Size

      3.5MB

    • MD5

      809a5fbe1e7a8d2dd549ef5698ac052b

    • SHA1

      7cb0bb11dc346f5dd839b65dbfc074a0d6741424

    • SHA256

      a5a049f33d89b6e1a8c5ee60024790b81cee3a268806946182bde58bb7e75fe2

    • SHA512

      7630994dcbf3ec982d15c39d851b13d188e0ea6671b2840d07128fb8beebb5bd710cbd25c9d556227350c0145e6b2361c96977f115dc2ce2eaa86ce6cc148dcc

    • SSDEEP

      98304:ZbClxzauMBi9py/2hTjeDrW6a0nsr6UbN:ZGlIBaReDrWpeUb

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks