General

  • Target

    b56b3612e9e09aa48f8c2d280b4981d345553191a552fb6fc496cee088dc4d79N

  • Size

    1.3MB

  • Sample

    241108-3pspdsselp

  • MD5

    2eb2946f8bf290d22f315185e5d9cb10

  • SHA1

    744cc20a5c81b24f920748c9dca3d6fd06eacaaa

  • SHA256

    b56b3612e9e09aa48f8c2d280b4981d345553191a552fb6fc496cee088dc4d79

  • SHA512

    99ca4769037f7a7ee617c1e30c649201e1ed3e28291883e9347fa559582de50cfe15166cdb578a750a5d961e5f7fa9df1c94153d1f5094050a13561a9791d735

  • SSDEEP

    12288:CpaVta50FiYcBknMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:maOYcDSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      b56b3612e9e09aa48f8c2d280b4981d345553191a552fb6fc496cee088dc4d79N

    • Size

      1.3MB

    • MD5

      2eb2946f8bf290d22f315185e5d9cb10

    • SHA1

      744cc20a5c81b24f920748c9dca3d6fd06eacaaa

    • SHA256

      b56b3612e9e09aa48f8c2d280b4981d345553191a552fb6fc496cee088dc4d79

    • SHA512

      99ca4769037f7a7ee617c1e30c649201e1ed3e28291883e9347fa559582de50cfe15166cdb578a750a5d961e5f7fa9df1c94153d1f5094050a13561a9791d735

    • SSDEEP

      12288:CpaVta50FiYcBknMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:maOYcDSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks