General

  • Target

    4fd809053fbafcdc58dac303d4eae9de1452008afa12b99d75f63fbde093b660N

  • Size

    2.6MB

  • Sample

    241026-fpf92a1fnq

  • MD5

    90195a8a1a36ca86534c5f92654a1020

  • SHA1

    09751c4844ab4504b80d7878298a827145aa5197

  • SHA256

    4fd809053fbafcdc58dac303d4eae9de1452008afa12b99d75f63fbde093b660

  • SHA512

    499c74ad1b3de7b17fa6923f3d88adc0a1bbb92fb31f8f77293a56e523f43280e1aef9187c52fe0ad58421cdd10cc6bb25ec09462a30d82e396155fb2a509128

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBgB/bS:sxX7QnxrloE5dpUpXb

Malware Config

Targets

    • Target

      4fd809053fbafcdc58dac303d4eae9de1452008afa12b99d75f63fbde093b660N

    • Size

      2.6MB

    • MD5

      90195a8a1a36ca86534c5f92654a1020

    • SHA1

      09751c4844ab4504b80d7878298a827145aa5197

    • SHA256

      4fd809053fbafcdc58dac303d4eae9de1452008afa12b99d75f63fbde093b660

    • SHA512

      499c74ad1b3de7b17fa6923f3d88adc0a1bbb92fb31f8f77293a56e523f43280e1aef9187c52fe0ad58421cdd10cc6bb25ec09462a30d82e396155fb2a509128

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBgB/bS:sxX7QnxrloE5dpUpXb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks