General

  • Target

    3bf7e0fb0aaf171ca9bd53b1d72bf6e2218aed1bb2183ad5a744ec778ad811fc

  • Size

    57KB

  • Sample

    241109-y2dc1s1flm

  • MD5

    00f9f2b941ca1f154da12a0af07b5085

  • SHA1

    4c086c418b7f7aaab03b43b95f401c91784228a8

  • SHA256

    3bf7e0fb0aaf171ca9bd53b1d72bf6e2218aed1bb2183ad5a744ec778ad811fc

  • SHA512

    f5b086605c94ec51aae305cfc2ec5568f7775cd683766b51cf97d2464f645aa9935aefa8e4ef5f03018459ab1d2f3de26c0db4a80d1458e85adcf48652df5fab

  • SSDEEP

    1536:HcaYzMXqtGNttyitOpg22J6jWWvr78Pxc:HcaY46tGNttyCa6JeWWvrQxc

Malware Config

Targets

    • Target

      3bf7e0fb0aaf171ca9bd53b1d72bf6e2218aed1bb2183ad5a744ec778ad811fc

    • Size

      57KB

    • MD5

      00f9f2b941ca1f154da12a0af07b5085

    • SHA1

      4c086c418b7f7aaab03b43b95f401c91784228a8

    • SHA256

      3bf7e0fb0aaf171ca9bd53b1d72bf6e2218aed1bb2183ad5a744ec778ad811fc

    • SHA512

      f5b086605c94ec51aae305cfc2ec5568f7775cd683766b51cf97d2464f645aa9935aefa8e4ef5f03018459ab1d2f3de26c0db4a80d1458e85adcf48652df5fab

    • SSDEEP

      1536:HcaYzMXqtGNttyitOpg22J6jWWvr78Pxc:HcaY46tGNttyCa6JeWWvrQxc

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks