General

  • Target

    2aef4cdf8846df0a35071e56e41c732b6259fbd2af6a288f81c9ce0fc1e7bcc3

  • Size

    11.9MB

  • Sample

    241008-j9mt4axckp

  • MD5

    51ee7c8663cd612fb83b3b6e35ff8277

  • SHA1

    56bc5a66bbf1f4ba483b3e8c7b28c3dc48a642a0

  • SHA256

    2aef4cdf8846df0a35071e56e41c732b6259fbd2af6a288f81c9ce0fc1e7bcc3

  • SHA512

    e749714d4a5246dc77ebd0e8189bac5c8915687c0bba8fa827cd6c91d5027e0df43034554c5e9f85bf2bf9bc7d700c9c884533d1df8e0a0dba3dc6ec5665f53d

  • SSDEEP

    196608:vSB2RFhgKUkVtFpNAMNwJGOV7JFI1xIgEcCrWpUhUsYbypZhQIY3lB6:vY2VTyMNmGO3FMxNCrWpRMZM1B

Malware Config

Targets

    • Target

      2aef4cdf8846df0a35071e56e41c732b6259fbd2af6a288f81c9ce0fc1e7bcc3

    • Size

      11.9MB

    • MD5

      51ee7c8663cd612fb83b3b6e35ff8277

    • SHA1

      56bc5a66bbf1f4ba483b3e8c7b28c3dc48a642a0

    • SHA256

      2aef4cdf8846df0a35071e56e41c732b6259fbd2af6a288f81c9ce0fc1e7bcc3

    • SHA512

      e749714d4a5246dc77ebd0e8189bac5c8915687c0bba8fa827cd6c91d5027e0df43034554c5e9f85bf2bf9bc7d700c9c884533d1df8e0a0dba3dc6ec5665f53d

    • SSDEEP

      196608:vSB2RFhgKUkVtFpNAMNwJGOV7JFI1xIgEcCrWpUhUsYbypZhQIY3lB6:vY2VTyMNmGO3FMxNCrWpRMZM1B

    • An open source browser data exporter written in golang.

    • HackBrowserData

      An open source golang web browser extractor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks