General

  • Target

    fa63e0578201b907d5b6c81fed506b11e6110b63e314efaf06951edaa75ff23d

  • Size

    1.8MB

  • Sample

    241002-ezyrdsxarr

  • MD5

    862ae830ca8a772b8680d6e203f25ea0

  • SHA1

    6230a2548ba2d28ac9e1d66fb565055135c2abb7

  • SHA256

    fa63e0578201b907d5b6c81fed506b11e6110b63e314efaf06951edaa75ff23d

  • SHA512

    f210ea4145747ba96f74eab96f13ce60e9cced6326f4e6ecb9dd817b523ec11013601bc29816bd81d8e071913e14640a476083bd169880a20d5b8ddd71f9b4a0

  • SSDEEP

    49152:Ux5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAxgDUYmvFur31yAipQCtXxc0H:UvbjVkjjCAzJLU7dG1yfpVBlH

Malware Config

Targets

    • Target

      fa63e0578201b907d5b6c81fed506b11e6110b63e314efaf06951edaa75ff23d

    • Size

      1.8MB

    • MD5

      862ae830ca8a772b8680d6e203f25ea0

    • SHA1

      6230a2548ba2d28ac9e1d66fb565055135c2abb7

    • SHA256

      fa63e0578201b907d5b6c81fed506b11e6110b63e314efaf06951edaa75ff23d

    • SHA512

      f210ea4145747ba96f74eab96f13ce60e9cced6326f4e6ecb9dd817b523ec11013601bc29816bd81d8e071913e14640a476083bd169880a20d5b8ddd71f9b4a0

    • SSDEEP

      49152:Ux5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAxgDUYmvFur31yAipQCtXxc0H:UvbjVkjjCAzJLU7dG1yfpVBlH

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks