General

  • Target

    ac6347a351d43e33e9d5bf78665b1348aa60ca389b2c2b12e465b57cd718c1ecN

  • Size

    2.6MB

  • Sample

    241109-al64dstanl

  • MD5

    7b0256968448498ea84bbe505d40cc60

  • SHA1

    c1638a81c0a8cd5fcb63c963b2ec4e7ef07cb107

  • SHA256

    ac6347a351d43e33e9d5bf78665b1348aa60ca389b2c2b12e465b57cd718c1ec

  • SHA512

    1f7f11fd861dd5ca0bf37e9993c0506e1bd9785ef10788bf605090977d44905aab214301cea6d7304c42fe7f4df461d326d73828cb1aa62754fe21591a996d57

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bS:sxX7QnxrloE5dpUpMb

Malware Config

Targets

    • Target

      ac6347a351d43e33e9d5bf78665b1348aa60ca389b2c2b12e465b57cd718c1ecN

    • Size

      2.6MB

    • MD5

      7b0256968448498ea84bbe505d40cc60

    • SHA1

      c1638a81c0a8cd5fcb63c963b2ec4e7ef07cb107

    • SHA256

      ac6347a351d43e33e9d5bf78665b1348aa60ca389b2c2b12e465b57cd718c1ec

    • SHA512

      1f7f11fd861dd5ca0bf37e9993c0506e1bd9785ef10788bf605090977d44905aab214301cea6d7304c42fe7f4df461d326d73828cb1aa62754fe21591a996d57

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBbB/bS:sxX7QnxrloE5dpUpMb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks