General

  • Target

    1a4fe0e61ace8b4099882963e2ab1540a9e135854a987885586f4e2f2de8782eN

  • Size

    2.6MB

  • Sample

    241109-bdxqesterg

  • MD5

    2cfb75b6fc92bdf2accb4e1f27e82da0

  • SHA1

    d8d7e2b38af0afbfca9992c803f924d5605eaf29

  • SHA256

    1a4fe0e61ace8b4099882963e2ab1540a9e135854a987885586f4e2f2de8782e

  • SHA512

    b81525fc491ed82755b2423036c395f75981a4dc8bc0ca1251dbf65f5ba6686838214fd7e6ab913882fb7c305390320a93718fbd591920dbff9a5512564093a1

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bS:sxX7QnxrloE5dpUpPb

Malware Config

Targets

    • Target

      1a4fe0e61ace8b4099882963e2ab1540a9e135854a987885586f4e2f2de8782eN

    • Size

      2.6MB

    • MD5

      2cfb75b6fc92bdf2accb4e1f27e82da0

    • SHA1

      d8d7e2b38af0afbfca9992c803f924d5605eaf29

    • SHA256

      1a4fe0e61ace8b4099882963e2ab1540a9e135854a987885586f4e2f2de8782e

    • SHA512

      b81525fc491ed82755b2423036c395f75981a4dc8bc0ca1251dbf65f5ba6686838214fd7e6ab913882fb7c305390320a93718fbd591920dbff9a5512564093a1

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBUB/bS:sxX7QnxrloE5dpUpPb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks