General

  • Target

    ae056fdbb60e6f4301b8b4c683554666433b412eae38419a2d058d1c7968d09eN

  • Size

    2.6MB

  • Sample

    241109-a3y44stdje

  • MD5

    51bd0727a21cd70e6b4564323b4d1950

  • SHA1

    e71562443cb1afc0712b9951e913e623fc2e9e8f

  • SHA256

    ae056fdbb60e6f4301b8b4c683554666433b412eae38419a2d058d1c7968d09e

  • SHA512

    c81dcbd43f4704c38fa971c7b1623e5812b6801b525085440a183b12d44cb0d0ce4e1e68f0b64587b1141547143ff1839406ca559c8b6ac267a07ca42ae050e6

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bS:sxX7QnxrloE5dpUpIb

Malware Config

Targets

    • Target

      ae056fdbb60e6f4301b8b4c683554666433b412eae38419a2d058d1c7968d09eN

    • Size

      2.6MB

    • MD5

      51bd0727a21cd70e6b4564323b4d1950

    • SHA1

      e71562443cb1afc0712b9951e913e623fc2e9e8f

    • SHA256

      ae056fdbb60e6f4301b8b4c683554666433b412eae38419a2d058d1c7968d09e

    • SHA512

      c81dcbd43f4704c38fa971c7b1623e5812b6801b525085440a183b12d44cb0d0ce4e1e68f0b64587b1141547143ff1839406ca559c8b6ac267a07ca42ae050e6

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bS:sxX7QnxrloE5dpUpIb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks