General

  • Target

    5c4fc127c3aeb620cb96afde85ca5d69ac4e280e1d94f02fb94c313a479ad620N

  • Size

    625KB

  • Sample

    241108-p9yt9asgla

  • MD5

    f656d976948a213643ec9d258e5aebd0

  • SHA1

    22018a44907afcd02e7c14676893521bb90a97de

  • SHA256

    5c4fc127c3aeb620cb96afde85ca5d69ac4e280e1d94f02fb94c313a479ad620

  • SHA512

    e484b309fb8ada21994d908383674836544de731c4fbabead4ea05d3c81c8b03f90cc624e9b56977f7aac60771c9efbdf654406d7be2f75c43a220ffc4cb7408

  • SSDEEP

    12288:sJp7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+:epCks7WE9F5pwg8zmdqQjC60jiHkU

Malware Config

Targets

    • Target

      5c4fc127c3aeb620cb96afde85ca5d69ac4e280e1d94f02fb94c313a479ad620N

    • Size

      625KB

    • MD5

      f656d976948a213643ec9d258e5aebd0

    • SHA1

      22018a44907afcd02e7c14676893521bb90a97de

    • SHA256

      5c4fc127c3aeb620cb96afde85ca5d69ac4e280e1d94f02fb94c313a479ad620

    • SHA512

      e484b309fb8ada21994d908383674836544de731c4fbabead4ea05d3c81c8b03f90cc624e9b56977f7aac60771c9efbdf654406d7be2f75c43a220ffc4cb7408

    • SSDEEP

      12288:sJp7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+:epCks7WE9F5pwg8zmdqQjC60jiHkU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks