General

  • Target

    6bee863af53655643851e0bf86626f280b014d1acc68257fc62a50b6fd91e49fN

  • Size

    2.6MB

  • Sample

    241108-1qg8yatjcn

  • MD5

    2c4a5c76649ae09f643b3feced389180

  • SHA1

    687479bdfa192f3107f37cc8087d3b070e284f85

  • SHA256

    6bee863af53655643851e0bf86626f280b014d1acc68257fc62a50b6fd91e49f

  • SHA512

    4da997439ca900ba16af1aa5709d675b2f1c02c05c433b822baa67c48c8f30ed61963a9414e526388d801722168759b5f750d62ca14bb6a6bf45375415fbd604

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpab

Malware Config

Targets

    • Target

      6bee863af53655643851e0bf86626f280b014d1acc68257fc62a50b6fd91e49fN

    • Size

      2.6MB

    • MD5

      2c4a5c76649ae09f643b3feced389180

    • SHA1

      687479bdfa192f3107f37cc8087d3b070e284f85

    • SHA256

      6bee863af53655643851e0bf86626f280b014d1acc68257fc62a50b6fd91e49f

    • SHA512

      4da997439ca900ba16af1aa5709d675b2f1c02c05c433b822baa67c48c8f30ed61963a9414e526388d801722168759b5f750d62ca14bb6a6bf45375415fbd604

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpab

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks