General

  • Target

    9ebf6c53243232231fad8357f86c82330208d95de9d4eee2416509279888a1d9N

  • Size

    3.9MB

  • Sample

    241026-f2pf6syjew

  • MD5

    9141521b0bc211e63887ff13c43a9e20

  • SHA1

    391313f33f4fba0fe0982a58b32f81e21b3a4e3c

  • SHA256

    9ebf6c53243232231fad8357f86c82330208d95de9d4eee2416509279888a1d9

  • SHA512

    6e4cbfba56e64988ac5da23771018c8596a4e5ffc8df09e79df0120709cc664ae287a60e96632a85d5d3cef284261c39ecf58694b2a91c14ee88ad6bb5e7e988

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB0B/bSqz8:sxX7QnxrloE5dpUpvbVz8

Malware Config

Targets

    • Target

      9ebf6c53243232231fad8357f86c82330208d95de9d4eee2416509279888a1d9N

    • Size

      3.9MB

    • MD5

      9141521b0bc211e63887ff13c43a9e20

    • SHA1

      391313f33f4fba0fe0982a58b32f81e21b3a4e3c

    • SHA256

      9ebf6c53243232231fad8357f86c82330208d95de9d4eee2416509279888a1d9

    • SHA512

      6e4cbfba56e64988ac5da23771018c8596a4e5ffc8df09e79df0120709cc664ae287a60e96632a85d5d3cef284261c39ecf58694b2a91c14ee88ad6bb5e7e988

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB0B/bSqz8:sxX7QnxrloE5dpUpvbVz8

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks