General

  • Target

    ead38fce547c6469862fb519732e0295a4c72159ad24b065a6165e613ebd50fd

  • Size

    8.6MB

  • Sample

    240929-y38kjsydjm

  • MD5

    daac772e21c3729ae4b4c83a7a48cc74

  • SHA1

    4d4c02ede65e642b6a3d299c83f538b9c2486abe

  • SHA256

    ead38fce547c6469862fb519732e0295a4c72159ad24b065a6165e613ebd50fd

  • SHA512

    3b05c8888d0250f9281f03c37fbf48717722b8f39956eb2dde36e14a8678549dfb4d1bc002f441c9c9fb96e262707b12f88f93e7484e18f8c32fc0c69fba7ee3

  • SSDEEP

    196608:KntEzJSR+wCfXMjAD+k5NL29LyxCx4A+pppcA3fZEdpiWyUQg:KtEEPAbq9LnxOI2y1yUQg

Malware Config

Targets

    • Target

      ead38fce547c6469862fb519732e0295a4c72159ad24b065a6165e613ebd50fd

    • Size

      8.6MB

    • MD5

      daac772e21c3729ae4b4c83a7a48cc74

    • SHA1

      4d4c02ede65e642b6a3d299c83f538b9c2486abe

    • SHA256

      ead38fce547c6469862fb519732e0295a4c72159ad24b065a6165e613ebd50fd

    • SHA512

      3b05c8888d0250f9281f03c37fbf48717722b8f39956eb2dde36e14a8678549dfb4d1bc002f441c9c9fb96e262707b12f88f93e7484e18f8c32fc0c69fba7ee3

    • SSDEEP

      196608:KntEzJSR+wCfXMjAD+k5NL29LyxCx4A+pppcA3fZEdpiWyUQg:KtEEPAbq9LnxOI2y1yUQg

    • An open source browser data exporter written in golang.

    • HackBrowserData

      An open source golang web browser extractor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks