General

  • Target

    992c8b5d6d61e6d78aa4a22765c0bc6c367afbf8ba41c76a31143d9033e7a0d7

  • Size

    1.3MB

  • Sample

    241026-f1pesazgra

  • MD5

    603ef2c5ff8df97caaf16da20525c9d8

  • SHA1

    55d5d23eb5bd06e0ea36f464664cffdc66d958be

  • SHA256

    992c8b5d6d61e6d78aa4a22765c0bc6c367afbf8ba41c76a31143d9033e7a0d7

  • SHA512

    a46fb61aeb1087231c461034f9c37aaad635a5adf60202a857eb4b06426ddf06ab9d20a6f7e3a47f003627ea07521493744b03a8e2cd503f84c1550d91c380fb

  • SSDEEP

    24576:YIXgCWSpRy4dSJVDsVu5unzqWvX1Iatr0zAiX90z/F0jsFB3SQk:rWSjLSJlsQuzqW/1IaB0zj0yjoB2

Malware Config

Targets

    • Target

      992c8b5d6d61e6d78aa4a22765c0bc6c367afbf8ba41c76a31143d9033e7a0d7

    • Size

      1.3MB

    • MD5

      603ef2c5ff8df97caaf16da20525c9d8

    • SHA1

      55d5d23eb5bd06e0ea36f464664cffdc66d958be

    • SHA256

      992c8b5d6d61e6d78aa4a22765c0bc6c367afbf8ba41c76a31143d9033e7a0d7

    • SHA512

      a46fb61aeb1087231c461034f9c37aaad635a5adf60202a857eb4b06426ddf06ab9d20a6f7e3a47f003627ea07521493744b03a8e2cd503f84c1550d91c380fb

    • SSDEEP

      24576:YIXgCWSpRy4dSJVDsVu5unzqWvX1Iatr0zAiX90z/F0jsFB3SQk:rWSjLSJlsQuzqW/1IaB0zj0yjoB2

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks