General

  • Target

    63d9dd86f06738656288f60eb90e79fb.exe

  • Size

    538KB

  • Sample

    241027-rykjlazakk

  • MD5

    63d9dd86f06738656288f60eb90e79fb

  • SHA1

    a3fc7819b495ec2db2f994e410cf63eb542432cc

  • SHA256

    d689b02f15e047ea14ec875635dc1a9c4f6bed469e77a349c193c8b036ec6189

  • SHA512

    7c8a27fa120da6a0faf32515145d00579a328801bf319c0b896ee86771885c4e6269d3233362a8cc74eceede26dd1c7a04b629a961eccf2917f22389e9bc6361

  • SSDEEP

    6144:YYqdc0NkzDVLBV6TIlA41u1cN3p0NIb88WsNMPaKFP3b2V122J0sL:Y9J89bzKcN3CNIb88WsNMP5F1k

Malware Config

Targets

    • Target

      63d9dd86f06738656288f60eb90e79fb.exe

    • Size

      538KB

    • MD5

      63d9dd86f06738656288f60eb90e79fb

    • SHA1

      a3fc7819b495ec2db2f994e410cf63eb542432cc

    • SHA256

      d689b02f15e047ea14ec875635dc1a9c4f6bed469e77a349c193c8b036ec6189

    • SHA512

      7c8a27fa120da6a0faf32515145d00579a328801bf319c0b896ee86771885c4e6269d3233362a8cc74eceede26dd1c7a04b629a961eccf2917f22389e9bc6361

    • SSDEEP

      6144:YYqdc0NkzDVLBV6TIlA41u1cN3p0NIb88WsNMPaKFP3b2V122J0sL:Y9J89bzKcN3CNIb88WsNMP5F1k

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks