General

  • Target

    2e575cfdb6839b86145c558d73168053a58cf2b01d22598eef2ecef5e6cf1d4c

  • Size

    4.9MB

  • Sample

    240927-yvpgpszbqf

  • MD5

    c6b50542e38519dfc846273339b06574

  • SHA1

    055490c621fdacc2f22d106aaac595951700b78e

  • SHA256

    2e575cfdb6839b86145c558d73168053a58cf2b01d22598eef2ecef5e6cf1d4c

  • SHA512

    e18e645f5302bd7400d928c0514ef1d69dc021016b0175f54fb4a33db8b09151fb393d9eda90621fa73ade57d9a6f66f52dc4782134cd59ee02743a559d1531c

  • SSDEEP

    49152:MTTtUd2gac/+O/STY8hLAjcHV/GmY3cKFBJZBvA7voS/MuEEu8VkhT/XdHaaMDml:pL8hLAjcHV+mY3cKDEwLtqD527BWG

Malware Config

Targets

    • Target

      2e575cfdb6839b86145c558d73168053a58cf2b01d22598eef2ecef5e6cf1d4c

    • Size

      4.9MB

    • MD5

      c6b50542e38519dfc846273339b06574

    • SHA1

      055490c621fdacc2f22d106aaac595951700b78e

    • SHA256

      2e575cfdb6839b86145c558d73168053a58cf2b01d22598eef2ecef5e6cf1d4c

    • SHA512

      e18e645f5302bd7400d928c0514ef1d69dc021016b0175f54fb4a33db8b09151fb393d9eda90621fa73ade57d9a6f66f52dc4782134cd59ee02743a559d1531c

    • SSDEEP

      49152:MTTtUd2gac/+O/STY8hLAjcHV/GmY3cKFBJZBvA7voS/MuEEu8VkhT/XdHaaMDml:pL8hLAjcHV+mY3cKDEwLtqD527BWG

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks