General

  • Target

    f5616e54a4c0b246668aa74f9b234fcaa08c763a8a1e24f4328340a9984dec49N

  • Size

    2.6MB

  • Sample

    241109-2ytsdatgql

  • MD5

    4b7eabf5ec5e530e68a32a7a34e0d9e0

  • SHA1

    4fc4dcfa02bad5813441da5050db54fd410447a1

  • SHA256

    f5616e54a4c0b246668aa74f9b234fcaa08c763a8a1e24f4328340a9984dec49

  • SHA512

    86f22d56d028f7b5139544d840ed85476a0ee6d283411e15455e7ad90f7d6459ba1054c78871f4e618c51be3d6b417bedb66afb35297e60e4dddf35fafc9a704

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bSq:sxX7QnxrloE5dpUpPbV

Malware Config

Targets

    • Target

      f5616e54a4c0b246668aa74f9b234fcaa08c763a8a1e24f4328340a9984dec49N

    • Size

      2.6MB

    • MD5

      4b7eabf5ec5e530e68a32a7a34e0d9e0

    • SHA1

      4fc4dcfa02bad5813441da5050db54fd410447a1

    • SHA256

      f5616e54a4c0b246668aa74f9b234fcaa08c763a8a1e24f4328340a9984dec49

    • SHA512

      86f22d56d028f7b5139544d840ed85476a0ee6d283411e15455e7ad90f7d6459ba1054c78871f4e618c51be3d6b417bedb66afb35297e60e4dddf35fafc9a704

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bSq:sxX7QnxrloE5dpUpPbV

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks