General

  • Target

    d5f12d230736a4c53bc3804436e7b61c33de95da8439dddbb617484f6a37113cN

  • Size

    2.6MB

  • Sample

    241109-bpy3matje1

  • MD5

    f975d76498c7cff6e1a283bcb5a167e0

  • SHA1

    278b1b0092b196db6a2fd168a35c7bde8763e430

  • SHA256

    d5f12d230736a4c53bc3804436e7b61c33de95da8439dddbb617484f6a37113c

  • SHA512

    b4629ef75eb898a47bda3871d337a5a61856929202689ba83fd67ab0e62a7339ccb802fb06d199ce64fc0c31b759bc08c4335d5dd3e8019b9f802783876d8de8

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bS:sxX7QnxrloE5dpUpLb

Malware Config

Targets

    • Target

      d5f12d230736a4c53bc3804436e7b61c33de95da8439dddbb617484f6a37113cN

    • Size

      2.6MB

    • MD5

      f975d76498c7cff6e1a283bcb5a167e0

    • SHA1

      278b1b0092b196db6a2fd168a35c7bde8763e430

    • SHA256

      d5f12d230736a4c53bc3804436e7b61c33de95da8439dddbb617484f6a37113c

    • SHA512

      b4629ef75eb898a47bda3871d337a5a61856929202689ba83fd67ab0e62a7339ccb802fb06d199ce64fc0c31b759bc08c4335d5dd3e8019b9f802783876d8de8

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBQB/bS:sxX7QnxrloE5dpUpLb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks