General

  • Target

    fcc503fcc7f0df5f53e2fbf919b37ac6f37ef7bc34a581c4049f28269dae9471N

  • Size

    2.6MB

  • Sample

    241108-tsykdavhkm

  • MD5

    8a9e059ca189158bf8e103af85559080

  • SHA1

    27065071e303cdcf500b589e77e4714a144dc7b1

  • SHA256

    fcc503fcc7f0df5f53e2fbf919b37ac6f37ef7bc34a581c4049f28269dae9471

  • SHA512

    0292b2c1ae622c16c0f394453c232f52415e30e3532ff2f49c9ba33a585cd5a782e8bb1be81f92f0fa0387842d9abdbebd9b5dc4f26a41179bcd94fa69944686

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bS:sxX7QnxrloE5dpUpWb

Malware Config

Targets

    • Target

      fcc503fcc7f0df5f53e2fbf919b37ac6f37ef7bc34a581c4049f28269dae9471N

    • Size

      2.6MB

    • MD5

      8a9e059ca189158bf8e103af85559080

    • SHA1

      27065071e303cdcf500b589e77e4714a144dc7b1

    • SHA256

      fcc503fcc7f0df5f53e2fbf919b37ac6f37ef7bc34a581c4049f28269dae9471

    • SHA512

      0292b2c1ae622c16c0f394453c232f52415e30e3532ff2f49c9ba33a585cd5a782e8bb1be81f92f0fa0387842d9abdbebd9b5dc4f26a41179bcd94fa69944686

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bS:sxX7QnxrloE5dpUpWb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks