General

  • Target

    d2d8f1fae99e164b816d2c08a41e0727c51bff89f12a204f2a765fd8ee73a35a

  • Size

    1.3MB

  • Sample

    241109-1ek6fssgnq

  • MD5

    09a74a04e0dc470fb13eb83a3bdf48f2

  • SHA1

    c7707fdc4366bb8328839fd9e61192cc8b72de44

  • SHA256

    d2d8f1fae99e164b816d2c08a41e0727c51bff89f12a204f2a765fd8ee73a35a

  • SHA512

    12dbc14a4af623c683171a21293d2a39c2a735aeeeab36420156421d82c54a3202779d68f13d4dc5dae4e86094b665db7a1614c18b6a232f94e376a937e47b10

  • SSDEEP

    24576:fIXgCWSpRyndSJVDsVu5unzqWvX1n8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:+WSjaSJlsQuzqW/1ngDUYmvFur31yAif

Malware Config

Targets

    • Target

      d2d8f1fae99e164b816d2c08a41e0727c51bff89f12a204f2a765fd8ee73a35a

    • Size

      1.3MB

    • MD5

      09a74a04e0dc470fb13eb83a3bdf48f2

    • SHA1

      c7707fdc4366bb8328839fd9e61192cc8b72de44

    • SHA256

      d2d8f1fae99e164b816d2c08a41e0727c51bff89f12a204f2a765fd8ee73a35a

    • SHA512

      12dbc14a4af623c683171a21293d2a39c2a735aeeeab36420156421d82c54a3202779d68f13d4dc5dae4e86094b665db7a1614c18b6a232f94e376a937e47b10

    • SSDEEP

      24576:fIXgCWSpRyndSJVDsVu5unzqWvX1n8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:+WSjaSJlsQuzqW/1ngDUYmvFur31yAif

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks