General

  • Target

    ae3b557fb88afd425e80b9786a9c45ecd1880bbfe0de1c95b7f678be783379f2N

  • Size

    1.5MB

  • Sample

    241003-kfqjkaxfnb

  • MD5

    c71b4e10aba05c2bbce5fe72c7c2ee20

  • SHA1

    c49275885007382491d57b2e9617cc0b18dc6e0b

  • SHA256

    ae3b557fb88afd425e80b9786a9c45ecd1880bbfe0de1c95b7f678be783379f2

  • SHA512

    0e28336ee7016f2060cb6d6e4d3177d1d4c839b9979c6b0bcd8a86d395f24d43602b56ff5a0460fa4831ff2ebec3cfd7a8a31395d6131372b9c3a8a15a79aa72

  • SSDEEP

    24576:6YPx8VCae3gFo6vqwkZncAwCzRZBsysQuG961E:tPKVoH6yvVcAwCzhsyvuPE

Malware Config

Targets

    • Target

      ae3b557fb88afd425e80b9786a9c45ecd1880bbfe0de1c95b7f678be783379f2N

    • Size

      1.5MB

    • MD5

      c71b4e10aba05c2bbce5fe72c7c2ee20

    • SHA1

      c49275885007382491d57b2e9617cc0b18dc6e0b

    • SHA256

      ae3b557fb88afd425e80b9786a9c45ecd1880bbfe0de1c95b7f678be783379f2

    • SHA512

      0e28336ee7016f2060cb6d6e4d3177d1d4c839b9979c6b0bcd8a86d395f24d43602b56ff5a0460fa4831ff2ebec3cfd7a8a31395d6131372b9c3a8a15a79aa72

    • SSDEEP

      24576:6YPx8VCae3gFo6vqwkZncAwCzRZBsysQuG961E:tPKVoH6yvVcAwCzhsyvuPE

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks