General

  • Target

    c4ce38d1726fe8dfa333c8fa570894424b3e2a3583d75eab9703f68d9361ffb0N

  • Size

    230KB

  • Sample

    241017-a2kkbswcpl

  • MD5

    419dd4c9c0bc71f42d9cc51111821b60

  • SHA1

    a3482fd1713761374c061d1db26bb03924252bf6

  • SHA256

    c4ce38d1726fe8dfa333c8fa570894424b3e2a3583d75eab9703f68d9361ffb0

  • SHA512

    5b6e352015ff708bc2ad8dad9f226a908e8ae3960efe6e92b24320c785a6b5f3ff1326e905f7fea19acd17a7549b1d585a5702d71755004a8ef91dbbe6be5841

  • SSDEEP

    6144:6Piynu0cvT2wQc4+T6YWtQSh/iuGkq7L2/zlUMp:6Piynu0cK9g6YWtp7TWSO4

Malware Config

Targets

    • Target

      c4ce38d1726fe8dfa333c8fa570894424b3e2a3583d75eab9703f68d9361ffb0N

    • Size

      230KB

    • MD5

      419dd4c9c0bc71f42d9cc51111821b60

    • SHA1

      a3482fd1713761374c061d1db26bb03924252bf6

    • SHA256

      c4ce38d1726fe8dfa333c8fa570894424b3e2a3583d75eab9703f68d9361ffb0

    • SHA512

      5b6e352015ff708bc2ad8dad9f226a908e8ae3960efe6e92b24320c785a6b5f3ff1326e905f7fea19acd17a7549b1d585a5702d71755004a8ef91dbbe6be5841

    • SSDEEP

      6144:6Piynu0cvT2wQc4+T6YWtQSh/iuGkq7L2/zlUMp:6Piynu0cK9g6YWtp7TWSO4

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks