General

  • Target

    8b0e1ae700060757f9cdb90a52a826b141e7dfacf11a336638fc5ae1c95ebef0N

  • Size

    2.6MB

  • Sample

    241108-stwazatnfv

  • MD5

    2041cd53aac1af807e86cffe6ff36730

  • SHA1

    40c60f7df10c41932d3d66ea1a3a19328a0d6ef2

  • SHA256

    8b0e1ae700060757f9cdb90a52a826b141e7dfacf11a336638fc5ae1c95ebef0

  • SHA512

    101c458f04f3ae44e5af1fb8cadbd4295267137e05a5daed8d797d5a4390a3ce0e0f28c547dd98acd4aa7b11c6ac92e6ccbbc3de238f50625f7709ff0d88a4b0

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bS:sxX7QnxrloE5dpUp+b

Malware Config

Targets

    • Target

      8b0e1ae700060757f9cdb90a52a826b141e7dfacf11a336638fc5ae1c95ebef0N

    • Size

      2.6MB

    • MD5

      2041cd53aac1af807e86cffe6ff36730

    • SHA1

      40c60f7df10c41932d3d66ea1a3a19328a0d6ef2

    • SHA256

      8b0e1ae700060757f9cdb90a52a826b141e7dfacf11a336638fc5ae1c95ebef0

    • SHA512

      101c458f04f3ae44e5af1fb8cadbd4295267137e05a5daed8d797d5a4390a3ce0e0f28c547dd98acd4aa7b11c6ac92e6ccbbc3de238f50625f7709ff0d88a4b0

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bS:sxX7QnxrloE5dpUp+b

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks