General

  • Target

    1ceeadb182364aed8ef89015732bf9aed860227c4cfdff9de33e4c68406c7cbd

  • Size

    1.3MB

  • Sample

    241026-dthbsayfpe

  • MD5

    5b882ed8dd955936bc9e5987c1d41054

  • SHA1

    f6a2f0db11de844a3cb198caea001713f149a567

  • SHA256

    1ceeadb182364aed8ef89015732bf9aed860227c4cfdff9de33e4c68406c7cbd

  • SHA512

    d43fa3bd662d26c256333a5936e1e554435667df45125e32d01d6f801d294c69bce4a1f5c18117b06a16806a93b4ec65d116515f5cd8d2d44e9d962436ecd27e

  • SSDEEP

    24576:DIXgCWSpRy1dSJVDsVu5unzqWvX1QHpaNur4lXuz2f1rdZF/:yWSjQSJlsQuzqW/1QJaN7oz63X

Malware Config

Targets

    • Target

      1ceeadb182364aed8ef89015732bf9aed860227c4cfdff9de33e4c68406c7cbd

    • Size

      1.3MB

    • MD5

      5b882ed8dd955936bc9e5987c1d41054

    • SHA1

      f6a2f0db11de844a3cb198caea001713f149a567

    • SHA256

      1ceeadb182364aed8ef89015732bf9aed860227c4cfdff9de33e4c68406c7cbd

    • SHA512

      d43fa3bd662d26c256333a5936e1e554435667df45125e32d01d6f801d294c69bce4a1f5c18117b06a16806a93b4ec65d116515f5cd8d2d44e9d962436ecd27e

    • SSDEEP

      24576:DIXgCWSpRy1dSJVDsVu5unzqWvX1QHpaNur4lXuz2f1rdZF/:yWSjQSJlsQuzqW/1QJaN7oz63X

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks