General

  • Target

    6c0b046f9d2399809c12fa847ebe8885f341d4952cafcaa0ae13df32d7fb8827

  • Size

    1.7MB

  • Sample

    241108-sw8zvatpay

  • MD5

    951b1deb78c265d19bb319b90f784535

  • SHA1

    7118f79d3f80b261d5660d5784414871ce661115

  • SHA256

    6c0b046f9d2399809c12fa847ebe8885f341d4952cafcaa0ae13df32d7fb8827

  • SHA512

    b78f5d1c26301975598c1839d879480d589e274322b8e483215f5416ae3b343bfef33f97cacbe3670b078841981ef2932f761f24a2048e16b31df7fb9e922379

  • SSDEEP

    49152:bKxNuLkTcKb4rSUfkVFjKCks7R9L58UqFJjskU:+fuLkT5NUQgC17DVqFJU

Malware Config

Targets

    • Target

      6c0b046f9d2399809c12fa847ebe8885f341d4952cafcaa0ae13df32d7fb8827

    • Size

      1.7MB

    • MD5

      951b1deb78c265d19bb319b90f784535

    • SHA1

      7118f79d3f80b261d5660d5784414871ce661115

    • SHA256

      6c0b046f9d2399809c12fa847ebe8885f341d4952cafcaa0ae13df32d7fb8827

    • SHA512

      b78f5d1c26301975598c1839d879480d589e274322b8e483215f5416ae3b343bfef33f97cacbe3670b078841981ef2932f761f24a2048e16b31df7fb9e922379

    • SSDEEP

      49152:bKxNuLkTcKb4rSUfkVFjKCks7R9L58UqFJjskU:+fuLkT5NUQgC17DVqFJU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks