General

  • Target

    42b977ac1c189067ff5fd3853ae6e895cc471caa050115d3aac3409873649b40N

  • Size

    2.6MB

  • Sample

    241109-aa7ksasgmn

  • MD5

    28059835fcef9aba9240ae90757e0290

  • SHA1

    a15d9d51328309f8bc59de08eaecfec07483e8bc

  • SHA256

    42b977ac1c189067ff5fd3853ae6e895cc471caa050115d3aac3409873649b40

  • SHA512

    b4be8d2a584785d8092cec220f2b167977f9f53e49cc3a840843381a9ae69fff2bbc04a7b76e536dbe352bb5134e6ef1a9f612ae113a7d55e21600eac329d990

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBYB/bS:sxX7QnxrloE5dpUpvb

Malware Config

Targets

    • Target

      42b977ac1c189067ff5fd3853ae6e895cc471caa050115d3aac3409873649b40N

    • Size

      2.6MB

    • MD5

      28059835fcef9aba9240ae90757e0290

    • SHA1

      a15d9d51328309f8bc59de08eaecfec07483e8bc

    • SHA256

      42b977ac1c189067ff5fd3853ae6e895cc471caa050115d3aac3409873649b40

    • SHA512

      b4be8d2a584785d8092cec220f2b167977f9f53e49cc3a840843381a9ae69fff2bbc04a7b76e536dbe352bb5134e6ef1a9f612ae113a7d55e21600eac329d990

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBYB/bS:sxX7QnxrloE5dpUpvb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks