General

  • Target

    359f1318c1873e357d175a876a933a8d6b74d70c486fe629c6b566b7fac31157N

  • Size

    52KB

  • Sample

    241109-cyrwcaxrak

  • MD5

    6a75737d8ecf2bb955273962fb5af600

  • SHA1

    719522b1fdf12c641257de5d1350b8911d828801

  • SHA256

    359f1318c1873e357d175a876a933a8d6b74d70c486fe629c6b566b7fac31157

  • SHA512

    e515e4a3bf90f46ce9f3a61acfc27f6333de422769d8098a81624bd8b50352ee75daa9d74ed1db3df2adceb29cbbfdfe5c395338f1eee3d72623f4511035475e

  • SSDEEP

    768:DlQ4hrvaEGU4aikqykezg2XpfYUBjYioRodRjl5:5LhE1Dezg2ZfYU4oLB5

Malware Config

Targets

    • Target

      359f1318c1873e357d175a876a933a8d6b74d70c486fe629c6b566b7fac31157N

    • Size

      52KB

    • MD5

      6a75737d8ecf2bb955273962fb5af600

    • SHA1

      719522b1fdf12c641257de5d1350b8911d828801

    • SHA256

      359f1318c1873e357d175a876a933a8d6b74d70c486fe629c6b566b7fac31157

    • SHA512

      e515e4a3bf90f46ce9f3a61acfc27f6333de422769d8098a81624bd8b50352ee75daa9d74ed1db3df2adceb29cbbfdfe5c395338f1eee3d72623f4511035475e

    • SSDEEP

      768:DlQ4hrvaEGU4aikqykezg2XpfYUBjYioRodRjl5:5LhE1Dezg2ZfYU4oLB5

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks