General

  • Target

    2a22441e0fab9709849b7b2c77e09234b8374bbf3f269fda9c15f3ecd9550768

  • Size

    717KB

  • Sample

    241108-n9x3aa1mex

  • MD5

    5de7f6ae710772be600cff2b80f4adf7

  • SHA1

    46473dec4e5d1d8b92b4305fa763351474f79f76

  • SHA256

    2a22441e0fab9709849b7b2c77e09234b8374bbf3f269fda9c15f3ecd9550768

  • SHA512

    61355217711eece108f00eec375975b0b549428f18d42db140eef671187f0dcd8867032d770b5bae58f684dad45a16eeb8d042cdff280140c475e9795e0ffa56

  • SSDEEP

    12288:aF3WFjJfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:63M9LOS2opPIXV

Malware Config

Targets

    • Target

      2a22441e0fab9709849b7b2c77e09234b8374bbf3f269fda9c15f3ecd9550768

    • Size

      717KB

    • MD5

      5de7f6ae710772be600cff2b80f4adf7

    • SHA1

      46473dec4e5d1d8b92b4305fa763351474f79f76

    • SHA256

      2a22441e0fab9709849b7b2c77e09234b8374bbf3f269fda9c15f3ecd9550768

    • SHA512

      61355217711eece108f00eec375975b0b549428f18d42db140eef671187f0dcd8867032d770b5bae58f684dad45a16eeb8d042cdff280140c475e9795e0ffa56

    • SSDEEP

      12288:aF3WFjJfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:63M9LOS2opPIXV

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks