General

  • Target

    b988afcffc3bfb403643d451fbb7f9d1b5e6534e876e41015d6a832ee59b9d0c

  • Size

    1.7MB

  • Sample

    241026-dwn74sxjbs

  • MD5

    2396276f0ec5214f15908ac09cafd35e

  • SHA1

    3b5f365d5fef5f73edc3a1f10e904fcbefa5a4f6

  • SHA256

    b988afcffc3bfb403643d451fbb7f9d1b5e6534e876e41015d6a832ee59b9d0c

  • SHA512

    f8b0ecd867296ff849df3b4d94f182e520add02df96e71873dfab4a8dbff135bec680c9641ce63f76ad26177e7c4bcfe265b433228307947b842f4f843def3fa

  • SSDEEP

    49152:KKxNupkTcKb4rSUfkVFj5gDUYmvFur31yAipQCtXxc0H:jfupkT5NUQaU7dG1yfpVBlH

Malware Config

Targets

    • Target

      b988afcffc3bfb403643d451fbb7f9d1b5e6534e876e41015d6a832ee59b9d0c

    • Size

      1.7MB

    • MD5

      2396276f0ec5214f15908ac09cafd35e

    • SHA1

      3b5f365d5fef5f73edc3a1f10e904fcbefa5a4f6

    • SHA256

      b988afcffc3bfb403643d451fbb7f9d1b5e6534e876e41015d6a832ee59b9d0c

    • SHA512

      f8b0ecd867296ff849df3b4d94f182e520add02df96e71873dfab4a8dbff135bec680c9641ce63f76ad26177e7c4bcfe265b433228307947b842f4f843def3fa

    • SSDEEP

      49152:KKxNupkTcKb4rSUfkVFj5gDUYmvFur31yAipQCtXxc0H:jfupkT5NUQaU7dG1yfpVBlH

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks