General

  • Target

    c723d0c7e33f55af5f8280a31ccd66c30d7f3cc88181ea940235d3b443bb9479

  • Size

    2.6MB

  • Sample

    241021-srev7szemr

  • MD5

    abd32dc50990e4212857c6b14304a420

  • SHA1

    67a01b3e2e3c7f6148a63a2eb19b3debbe440167

  • SHA256

    c723d0c7e33f55af5f8280a31ccd66c30d7f3cc88181ea940235d3b443bb9479

  • SHA512

    6ae62d4901408b2678be81723649e78a36ced2dc356eded6586b2b9e1cb64b75b8734adb3df09e0e2af3f99cc48ba2064c357dcbcbea75c5f51d628115dd1347

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBCB/bS:sxX7QnxrloE5dpUpdb

Malware Config

Targets

    • Target

      c723d0c7e33f55af5f8280a31ccd66c30d7f3cc88181ea940235d3b443bb9479

    • Size

      2.6MB

    • MD5

      abd32dc50990e4212857c6b14304a420

    • SHA1

      67a01b3e2e3c7f6148a63a2eb19b3debbe440167

    • SHA256

      c723d0c7e33f55af5f8280a31ccd66c30d7f3cc88181ea940235d3b443bb9479

    • SHA512

      6ae62d4901408b2678be81723649e78a36ced2dc356eded6586b2b9e1cb64b75b8734adb3df09e0e2af3f99cc48ba2064c357dcbcbea75c5f51d628115dd1347

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBCB/bS:sxX7QnxrloE5dpUpdb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks