General

  • Target

    3c7e1be641b2dfc88eaf389ee042b049545a365ef4f65b1dfdb8c175f18757f1N

  • Size

    2.6MB

  • Sample

    241109-afag8sskdt

  • MD5

    39e4cae57843418a2c032f461de3cd50

  • SHA1

    336d9324cb6979ce7550ee39c77d18046f39e73c

  • SHA256

    3c7e1be641b2dfc88eaf389ee042b049545a365ef4f65b1dfdb8c175f18757f1

  • SHA512

    cfe3238248f13aef0d53f0386bb87507457750e9312a65548508ef87c7de27fcd44dca88e8f188dbc58dc42da6ee1c818a40a698555808706154ddfcaa9fa201

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBjB/bS:sxX7QnxrloE5dpUp8b

Malware Config

Targets

    • Target

      3c7e1be641b2dfc88eaf389ee042b049545a365ef4f65b1dfdb8c175f18757f1N

    • Size

      2.6MB

    • MD5

      39e4cae57843418a2c032f461de3cd50

    • SHA1

      336d9324cb6979ce7550ee39c77d18046f39e73c

    • SHA256

      3c7e1be641b2dfc88eaf389ee042b049545a365ef4f65b1dfdb8c175f18757f1

    • SHA512

      cfe3238248f13aef0d53f0386bb87507457750e9312a65548508ef87c7de27fcd44dca88e8f188dbc58dc42da6ee1c818a40a698555808706154ddfcaa9fa201

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBjB/bS:sxX7QnxrloE5dpUp8b

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks