General

  • Target

    8350c8dd6c64c8a90bb3d99fa321c3beb1e8424fa682b4c9517c90dfddcca420N

  • Size

    2.6MB

  • Sample

    241108-3ybggasfqn

  • MD5

    cef5dad727471586603a887b866d9920

  • SHA1

    12971557a18ba400a88978d45ab759f7a35d70a5

  • SHA256

    8350c8dd6c64c8a90bb3d99fa321c3beb1e8424fa682b4c9517c90dfddcca420

  • SHA512

    973f8bff66d20814b9a167a6b88209524865d30dd0b397cfcfdc34fe0c49b981e7ecdfe9d25b9a375611871725e483f81d6128b63523dd5873093706e1ce72f5

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBdB/bS:sxX7QnxrloE5dpUpmb

Malware Config

Targets

    • Target

      8350c8dd6c64c8a90bb3d99fa321c3beb1e8424fa682b4c9517c90dfddcca420N

    • Size

      2.6MB

    • MD5

      cef5dad727471586603a887b866d9920

    • SHA1

      12971557a18ba400a88978d45ab759f7a35d70a5

    • SHA256

      8350c8dd6c64c8a90bb3d99fa321c3beb1e8424fa682b4c9517c90dfddcca420

    • SHA512

      973f8bff66d20814b9a167a6b88209524865d30dd0b397cfcfdc34fe0c49b981e7ecdfe9d25b9a375611871725e483f81d6128b63523dd5873093706e1ce72f5

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBdB/bS:sxX7QnxrloE5dpUpmb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks