General

  • Target

    5787c535aaa844561dd4859550bb95f9a8f07da59bbc528e7b6bf8132bb9c86dN

  • Size

    2.6MB

  • Sample

    241027-r8ytzawpgx

  • MD5

    a2bf60c5d397336d40a6f9f8aede2f20

  • SHA1

    11bc085796ec1fbca78badd07b9b0223b3f4a33f

  • SHA256

    5787c535aaa844561dd4859550bb95f9a8f07da59bbc528e7b6bf8132bb9c86d

  • SHA512

    7b05a6483ad89d4a8f0eefb0012e18a8eade47f2206142573f0420f133b71caa1429ad8a20170825e213c406e7fcbd127511c30044d3cc4566bb1e569268ae90

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBrB/bS:sxX7QnxrloE5dpUpMb

Malware Config

Targets

    • Target

      5787c535aaa844561dd4859550bb95f9a8f07da59bbc528e7b6bf8132bb9c86dN

    • Size

      2.6MB

    • MD5

      a2bf60c5d397336d40a6f9f8aede2f20

    • SHA1

      11bc085796ec1fbca78badd07b9b0223b3f4a33f

    • SHA256

      5787c535aaa844561dd4859550bb95f9a8f07da59bbc528e7b6bf8132bb9c86d

    • SHA512

      7b05a6483ad89d4a8f0eefb0012e18a8eade47f2206142573f0420f133b71caa1429ad8a20170825e213c406e7fcbd127511c30044d3cc4566bb1e569268ae90

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBrB/bS:sxX7QnxrloE5dpUpMb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks