General

  • Target

    3fb2eee124eab036c5864cb3b74fd94c70428a2000742172a61d44d7f1345569N

  • Size

    2.6MB

  • Sample

    241108-z2l6lazdpd

  • MD5

    6d7e611d4e771a86a5b3031cdce214b0

  • SHA1

    1281ca960d50b7843fa0360350652678f0596ef7

  • SHA256

    3fb2eee124eab036c5864cb3b74fd94c70428a2000742172a61d44d7f1345569

  • SHA512

    ec259921b708f157b03c1c61a1107cd2c6b2e1df72cc8390bb0b70c8812d82b7420f386f2ef21557615f3aba9d0c550d9dd9372de23232483a93fe1af1513173

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bSq:sxX7QnxrloE5dpUpsbV

Malware Config

Targets

    • Target

      3fb2eee124eab036c5864cb3b74fd94c70428a2000742172a61d44d7f1345569N

    • Size

      2.6MB

    • MD5

      6d7e611d4e771a86a5b3031cdce214b0

    • SHA1

      1281ca960d50b7843fa0360350652678f0596ef7

    • SHA256

      3fb2eee124eab036c5864cb3b74fd94c70428a2000742172a61d44d7f1345569

    • SHA512

      ec259921b708f157b03c1c61a1107cd2c6b2e1df72cc8390bb0b70c8812d82b7420f386f2ef21557615f3aba9d0c550d9dd9372de23232483a93fe1af1513173

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bSq:sxX7QnxrloE5dpUpsbV

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks