General

  • Target

    e30a94d5e8127d909d41fb130b938f2416764a9ded31c48901fa4117724de1e3N

  • Size

    2.6MB

  • Sample

    241021-leqzdayblf

  • MD5

    1e7eec02a248af80fc2d356bac112c20

  • SHA1

    c3e84056c05b07e54142b6e7763beccf3a0f9b5f

  • SHA256

    e30a94d5e8127d909d41fb130b938f2416764a9ded31c48901fa4117724de1e3

  • SHA512

    00696a76fed3465c96bc824fcfd5493e1c5cc862ccba0e80ce2e907f1beea3985a581ed8436f18c71a99bac44ed0983ca105d2feedd077f0ced9202fc0a02234

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBLB/bS:sxX7QnxrloE5dpUpkb

Malware Config

Targets

    • Target

      e30a94d5e8127d909d41fb130b938f2416764a9ded31c48901fa4117724de1e3N

    • Size

      2.6MB

    • MD5

      1e7eec02a248af80fc2d356bac112c20

    • SHA1

      c3e84056c05b07e54142b6e7763beccf3a0f9b5f

    • SHA256

      e30a94d5e8127d909d41fb130b938f2416764a9ded31c48901fa4117724de1e3

    • SHA512

      00696a76fed3465c96bc824fcfd5493e1c5cc862ccba0e80ce2e907f1beea3985a581ed8436f18c71a99bac44ed0983ca105d2feedd077f0ced9202fc0a02234

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBLB/bS:sxX7QnxrloE5dpUpkb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks