General

  • Target

    5190b3e7fae94b1ea0e7836bd328a6fde1dc116b8bb8de4f8c27c2f05e1ebba8N

  • Size

    2.6MB

  • Sample

    241026-gb2jgs1hrj

  • MD5

    412f9d2a80a3c0e90cf8d2dfcd7cf1b0

  • SHA1

    2c5b425fb1f18a8d9d8c99779107f795844c0dd2

  • SHA256

    5190b3e7fae94b1ea0e7836bd328a6fde1dc116b8bb8de4f8c27c2f05e1ebba8

  • SHA512

    c4228940e6234741340bfabef91ad58a5c1e135cf60af1b65e5482ca11b83f26ac949af655bef773d33e33f1122190a5b5ad1b336f1cb43651801fd23144e393

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bS:sxX7QnxrloE5dpUpWb

Malware Config

Targets

    • Target

      5190b3e7fae94b1ea0e7836bd328a6fde1dc116b8bb8de4f8c27c2f05e1ebba8N

    • Size

      2.6MB

    • MD5

      412f9d2a80a3c0e90cf8d2dfcd7cf1b0

    • SHA1

      2c5b425fb1f18a8d9d8c99779107f795844c0dd2

    • SHA256

      5190b3e7fae94b1ea0e7836bd328a6fde1dc116b8bb8de4f8c27c2f05e1ebba8

    • SHA512

      c4228940e6234741340bfabef91ad58a5c1e135cf60af1b65e5482ca11b83f26ac949af655bef773d33e33f1122190a5b5ad1b336f1cb43651801fd23144e393

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bS:sxX7QnxrloE5dpUpWb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks