General

  • Target

    8cc21d0df981473c5acd757aa7a89379591f48d3bd47c51f11bb6cdedd7d8835

  • Size

    1.7MB

  • Sample

    241005-m27q3s1bmk

  • MD5

    b23789f07797d2b6b62f4b8696545827

  • SHA1

    b30a3ea49c90e8ac311387f6552a42e413e82bde

  • SHA256

    8cc21d0df981473c5acd757aa7a89379591f48d3bd47c51f11bb6cdedd7d8835

  • SHA512

    278766f8af2aa6bb333d0dbce40a7501878474c2a8e54e589954c3462b62ad8e6477207b0eb748a09c3de27a2022f3e8dc37f082bc5c843bb684031bcd1d68b5

  • SSDEEP

    49152:kKxNupkTcKb4rSUfkVFjUf9Ckt7c20+9qNxUW:RfupkT5NUQOfEkKK90

Malware Config

Targets

    • Target

      8cc21d0df981473c5acd757aa7a89379591f48d3bd47c51f11bb6cdedd7d8835

    • Size

      1.7MB

    • MD5

      b23789f07797d2b6b62f4b8696545827

    • SHA1

      b30a3ea49c90e8ac311387f6552a42e413e82bde

    • SHA256

      8cc21d0df981473c5acd757aa7a89379591f48d3bd47c51f11bb6cdedd7d8835

    • SHA512

      278766f8af2aa6bb333d0dbce40a7501878474c2a8e54e589954c3462b62ad8e6477207b0eb748a09c3de27a2022f3e8dc37f082bc5c843bb684031bcd1d68b5

    • SSDEEP

      49152:kKxNupkTcKb4rSUfkVFjUf9Ckt7c20+9qNxUW:RfupkT5NUQOfEkKK90

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks