General

  • Target

    c0cd0129641f7fa970121f840ca5b314d6c052f265052282dc9127676ec18a03N

  • Size

    1.4MB

  • Sample

    241108-qavtzsvphr

  • MD5

    4839e5e5f31a40173daf9c454623fb60

  • SHA1

    10bb67baf93124126fb90d3f8bef4a74bde607f5

  • SHA256

    c0cd0129641f7fa970121f840ca5b314d6c052f265052282dc9127676ec18a03

  • SHA512

    d5232f8251c66eec5c7159e32b8061e65618c3b2c9dd4060026dbf138db241077b30d543dc5f8f9d02e536196c02cf206b0e22c143c8e858c6b3a9376ba8168f

  • SSDEEP

    24576:AIK0JL1CqVg1OwVSc6xxrXA7lTiwC4h6cFPZOuBU:lbPJwVSc4rXAhWwC4hHPYuBU

Malware Config

Targets

    • Target

      c0cd0129641f7fa970121f840ca5b314d6c052f265052282dc9127676ec18a03N

    • Size

      1.4MB

    • MD5

      4839e5e5f31a40173daf9c454623fb60

    • SHA1

      10bb67baf93124126fb90d3f8bef4a74bde607f5

    • SHA256

      c0cd0129641f7fa970121f840ca5b314d6c052f265052282dc9127676ec18a03

    • SHA512

      d5232f8251c66eec5c7159e32b8061e65618c3b2c9dd4060026dbf138db241077b30d543dc5f8f9d02e536196c02cf206b0e22c143c8e858c6b3a9376ba8168f

    • SSDEEP

      24576:AIK0JL1CqVg1OwVSc6xxrXA7lTiwC4h6cFPZOuBU:lbPJwVSc4rXAhWwC4hHPYuBU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks