General

  • Target

    5bb38cdd433bf7b22795da5d1f80f0384dbd343bccfacaf265029abe4ff1bfa1

  • Size

    1.3MB

  • Sample

    241026-f1bhxszgqd

  • MD5

    9475888c7ab0abbf724fa36b54ae334a

  • SHA1

    f23225aacec89bdc2cc38ada0cc8a657d883b5f7

  • SHA256

    5bb38cdd433bf7b22795da5d1f80f0384dbd343bccfacaf265029abe4ff1bfa1

  • SHA512

    b2aabf307f09018e06a2b0966f5572a338265080eabf4e0787b07cad7bfb582f7fc45fc7cf7faa9fcd13be9cea035fd4d0a2a2f689de0b33378f8dad0a65dc45

  • SSDEEP

    24576:WIXgCWSpRy1dSJVDsVu5unzqWvX1lHpaNur4lXuz2f1rdZF/:ZWSjQSJlsQuzqW/1lJaN7oz63X

Malware Config

Targets

    • Target

      5bb38cdd433bf7b22795da5d1f80f0384dbd343bccfacaf265029abe4ff1bfa1

    • Size

      1.3MB

    • MD5

      9475888c7ab0abbf724fa36b54ae334a

    • SHA1

      f23225aacec89bdc2cc38ada0cc8a657d883b5f7

    • SHA256

      5bb38cdd433bf7b22795da5d1f80f0384dbd343bccfacaf265029abe4ff1bfa1

    • SHA512

      b2aabf307f09018e06a2b0966f5572a338265080eabf4e0787b07cad7bfb582f7fc45fc7cf7faa9fcd13be9cea035fd4d0a2a2f689de0b33378f8dad0a65dc45

    • SSDEEP

      24576:WIXgCWSpRy1dSJVDsVu5unzqWvX1lHpaNur4lXuz2f1rdZF/:ZWSjQSJlsQuzqW/1lJaN7oz63X

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks