General

  • Target

    966603c9f44bd09c5025c0efba80d555142f6af227990d9bcf81a1e6b9043ce1

  • Size

    70KB

  • Sample

    241108-n7h6ca1mbt

  • MD5

    5464310461cfafc6c784a788c547f1e2

  • SHA1

    d5a1d7ac597b05cff5ad3c8d07d1ff15a33cf662

  • SHA256

    966603c9f44bd09c5025c0efba80d555142f6af227990d9bcf81a1e6b9043ce1

  • SHA512

    7181bb2dd246c059880978b369a0bdbc7a8a8e01cef356bd408b6ec9d623a005d8367218fb013904459bd28492e6b7b76409a2ac06ba45633e1476bb81edae81

  • SSDEEP

    1536:Pgu/k/aYzMXqtGNttyUn01Q78a4Rwriw+d9bHrkT5gUHz7FxtJ:PguM/aY46tGNttyJQ7KRwrBkfkT5xHzD

Malware Config

Targets

    • Target

      966603c9f44bd09c5025c0efba80d555142f6af227990d9bcf81a1e6b9043ce1

    • Size

      70KB

    • MD5

      5464310461cfafc6c784a788c547f1e2

    • SHA1

      d5a1d7ac597b05cff5ad3c8d07d1ff15a33cf662

    • SHA256

      966603c9f44bd09c5025c0efba80d555142f6af227990d9bcf81a1e6b9043ce1

    • SHA512

      7181bb2dd246c059880978b369a0bdbc7a8a8e01cef356bd408b6ec9d623a005d8367218fb013904459bd28492e6b7b76409a2ac06ba45633e1476bb81edae81

    • SSDEEP

      1536:Pgu/k/aYzMXqtGNttyUn01Q78a4Rwriw+d9bHrkT5gUHz7FxtJ:PguM/aY46tGNttyJQ7KRwrBkfkT5xHzD

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks