General

  • Target

    bbc97ff6b86fc2807dfca1406072dc6b4982bbdf01b593fcd95fd73e3645180d

  • Size

    1.7MB

  • Sample

    241011-za862ssdmc

  • MD5

    1d8bd51f1666cc066404b34951dfce36

  • SHA1

    516be69965d40b9b34dd0ab61978ceda829b6d91

  • SHA256

    bbc97ff6b86fc2807dfca1406072dc6b4982bbdf01b593fcd95fd73e3645180d

  • SHA512

    a515496cf82f672b599d8622fe396612951d2f54eb810f5aba4685644a376d028aa0a6bb28a5ac17197c91eb36247f6cdbaf6fff530a25ea6e05e5939cf1deb0

  • SSDEEP

    49152:/KxNuLkTcKb4rSUfkVFjQaB0zj0yjoB2:SfuLkT5NUQhB2Yyjl

Malware Config

Targets

    • Target

      bbc97ff6b86fc2807dfca1406072dc6b4982bbdf01b593fcd95fd73e3645180d

    • Size

      1.7MB

    • MD5

      1d8bd51f1666cc066404b34951dfce36

    • SHA1

      516be69965d40b9b34dd0ab61978ceda829b6d91

    • SHA256

      bbc97ff6b86fc2807dfca1406072dc6b4982bbdf01b593fcd95fd73e3645180d

    • SHA512

      a515496cf82f672b599d8622fe396612951d2f54eb810f5aba4685644a376d028aa0a6bb28a5ac17197c91eb36247f6cdbaf6fff530a25ea6e05e5939cf1deb0

    • SSDEEP

      49152:/KxNuLkTcKb4rSUfkVFjQaB0zj0yjoB2:SfuLkT5NUQhB2Yyjl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks