General

  • Target

    b307de86d2a122c68184c7bfaf038d08967080842cfdfdc8d0c3b19d2b321a9e

  • Size

    3.5MB

  • Sample

    241026-fytxgsxqbl

  • MD5

    2a30e49286758ce93341010dcf285a2a

  • SHA1

    9f04e0d406e722a419d7e6dd5656b0f53747f0c7

  • SHA256

    b307de86d2a122c68184c7bfaf038d08967080842cfdfdc8d0c3b19d2b321a9e

  • SHA512

    1cdab71c9b05e101f1d9c010816fc2891e07e93d566f152b429dccde465e8f4085436be0ab2828cebfa73024bfd64b555d104b9c81ce6cb01e2e6a7ccb2299b6

  • SSDEEP

    49152:dBp5tzuM0S2S5mLFEuVebedv9uNBb8AftK9qrO1LS9RhSq15vTNuHv/QXd9CQxMo:dPCFk/fUqrOiOc5z

Malware Config

Targets

    • Target

      b307de86d2a122c68184c7bfaf038d08967080842cfdfdc8d0c3b19d2b321a9e

    • Size

      3.5MB

    • MD5

      2a30e49286758ce93341010dcf285a2a

    • SHA1

      9f04e0d406e722a419d7e6dd5656b0f53747f0c7

    • SHA256

      b307de86d2a122c68184c7bfaf038d08967080842cfdfdc8d0c3b19d2b321a9e

    • SHA512

      1cdab71c9b05e101f1d9c010816fc2891e07e93d566f152b429dccde465e8f4085436be0ab2828cebfa73024bfd64b555d104b9c81ce6cb01e2e6a7ccb2299b6

    • SSDEEP

      49152:dBp5tzuM0S2S5mLFEuVebedv9uNBb8AftK9qrO1LS9RhSq15vTNuHv/QXd9CQxMo:dPCFk/fUqrOiOc5z

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks