General

  • Target

    15ad802d3d595951a671045fc06a5677e5397884366ed454342f6951c0172fbdN

  • Size

    4.1MB

  • Sample

    241108-r2g8mstgjg

  • MD5

    1474a1f70a6f904a5b2ab7667ae7d250

  • SHA1

    02f5a85e1f974db2e863fcce355cf4d31069655c

  • SHA256

    15ad802d3d595951a671045fc06a5677e5397884366ed454342f6951c0172fbd

  • SHA512

    cf84e3944adca2cce6d2620d39849154dc78e045304e1c971dd1cbc845457e493b4dadec9ad74fdd63da0c0b1cd7a8e4f77a851397bd3c18590f994eb827373d

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBvB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpsbVz8eLFcz

Malware Config

Targets

    • Target

      15ad802d3d595951a671045fc06a5677e5397884366ed454342f6951c0172fbdN

    • Size

      4.1MB

    • MD5

      1474a1f70a6f904a5b2ab7667ae7d250

    • SHA1

      02f5a85e1f974db2e863fcce355cf4d31069655c

    • SHA256

      15ad802d3d595951a671045fc06a5677e5397884366ed454342f6951c0172fbd

    • SHA512

      cf84e3944adca2cce6d2620d39849154dc78e045304e1c971dd1cbc845457e493b4dadec9ad74fdd63da0c0b1cd7a8e4f77a851397bd3c18590f994eb827373d

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBvB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpsbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks