General

  • Target

    efe5211c79f43d4dfce527f6a7befdb5653d067019542dbeadd460b46cb15b06N

  • Size

    2.6MB

  • Sample

    241109-y18sjatqcj

  • MD5

    9971c4d3b73538d13b6646b40959bc30

  • SHA1

    75b9533796871a707bf6e61a31ac194f454e7427

  • SHA256

    efe5211c79f43d4dfce527f6a7befdb5653d067019542dbeadd460b46cb15b06

  • SHA512

    e243bfa9bcf3273c60d55bf7e091db35add273a5a367b58297fb24e2bb0a42dd375111b55d2f87714f60cdbca3a46ee35b212c34f3afe1ecfe30094e83452c7e

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bS:sxX7QnxrloE5dpUp5b

Malware Config

Targets

    • Target

      efe5211c79f43d4dfce527f6a7befdb5653d067019542dbeadd460b46cb15b06N

    • Size

      2.6MB

    • MD5

      9971c4d3b73538d13b6646b40959bc30

    • SHA1

      75b9533796871a707bf6e61a31ac194f454e7427

    • SHA256

      efe5211c79f43d4dfce527f6a7befdb5653d067019542dbeadd460b46cb15b06

    • SHA512

      e243bfa9bcf3273c60d55bf7e091db35add273a5a367b58297fb24e2bb0a42dd375111b55d2f87714f60cdbca3a46ee35b212c34f3afe1ecfe30094e83452c7e

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB2B/bS:sxX7QnxrloE5dpUp5b

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks