General

  • Target

    1f58b020a7803abbda714c4d4b65ac98eee289f394b9cce0b23d4975b8ec5eb4

  • Size

    1.8MB

  • Sample

    241014-y54dlsycrj

  • MD5

    5d7f6990d3b16c8873679f9b4b1666ef

  • SHA1

    1e3e4bf5775f8ba541c8fdb0c2dc2f63d3782257

  • SHA256

    1f58b020a7803abbda714c4d4b65ac98eee289f394b9cce0b23d4975b8ec5eb4

  • SHA512

    e92160f736be2dbbf784ec3b06fcac8853751a883458776e7f88d265b5ef1d98183452c3c54e9082f9f38be51f43b0b5fa41a25cc8e201e14eadf4d6312ac983

  • SSDEEP

    49152:9M9QPdxwfE7WlFwKAfzuTiDFUFkTErvL73RLSo+2fhl:91PdVQFwKZCFgZrvvRe12fD

Malware Config

Targets

    • Target

      1f58b020a7803abbda714c4d4b65ac98eee289f394b9cce0b23d4975b8ec5eb4

    • Size

      1.8MB

    • MD5

      5d7f6990d3b16c8873679f9b4b1666ef

    • SHA1

      1e3e4bf5775f8ba541c8fdb0c2dc2f63d3782257

    • SHA256

      1f58b020a7803abbda714c4d4b65ac98eee289f394b9cce0b23d4975b8ec5eb4

    • SHA512

      e92160f736be2dbbf784ec3b06fcac8853751a883458776e7f88d265b5ef1d98183452c3c54e9082f9f38be51f43b0b5fa41a25cc8e201e14eadf4d6312ac983

    • SSDEEP

      49152:9M9QPdxwfE7WlFwKAfzuTiDFUFkTErvL73RLSo+2fhl:91PdVQFwKZCFgZrvvRe12fD

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks