General

  • Target

    66a232b417a725d6742a89f8e4ff1792bcc0603add9cc140788e170eabcd41c1N

  • Size

    2.6MB

  • Sample

    241021-lkkdsazhkn

  • MD5

    b8536db9579ad247edaa295602932b20

  • SHA1

    72f2f255df08a008f9f8a8a1aea87eb81a087b5f

  • SHA256

    66a232b417a725d6742a89f8e4ff1792bcc0603add9cc140788e170eabcd41c1

  • SHA512

    a2f628cb2cf685bb5209331665f01f21edf8cc31585d611dcba83316b6eb424c25ec18fc1a1c2f5c7656b0472b16732bd2eb7588eeda9dcee116c1c9116e1fd2

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBWB/bS:sxX7QnxrloE5dpUppb

Malware Config

Targets

    • Target

      66a232b417a725d6742a89f8e4ff1792bcc0603add9cc140788e170eabcd41c1N

    • Size

      2.6MB

    • MD5

      b8536db9579ad247edaa295602932b20

    • SHA1

      72f2f255df08a008f9f8a8a1aea87eb81a087b5f

    • SHA256

      66a232b417a725d6742a89f8e4ff1792bcc0603add9cc140788e170eabcd41c1

    • SHA512

      a2f628cb2cf685bb5209331665f01f21edf8cc31585d611dcba83316b6eb424c25ec18fc1a1c2f5c7656b0472b16732bd2eb7588eeda9dcee116c1c9116e1fd2

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBWB/bS:sxX7QnxrloE5dpUppb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks