General

  • Target

    4963ffbe4fea85cf5f0fbf33937db9e0a15b63237ac2747e0c05e7eefbc90bf0

  • Size

    186KB

  • Sample

    241109-y2dc1szrct

  • MD5

    0e25412d99d41e9a106d2a39e46084e7

  • SHA1

    166c2105bd0eeafa7051e013399c7babda04b95a

  • SHA256

    4963ffbe4fea85cf5f0fbf33937db9e0a15b63237ac2747e0c05e7eefbc90bf0

  • SHA512

    1c5859d9839b611b83a083631f423bf039f8d11b3ef6dd9300924d6a2f751597d4c6c6ab5cae12003469cadf430a3579716fb68ce43c717ef7fc414cbae0033c

  • SSDEEP

    3072:HcaY46tGNttyCa6oARYLJXJoYtpA/H3RpDecC+EZX70RjLTu46R0Eb:M46tGdyr6ogYLjvqXRpDecw7Kj3u46db

Malware Config

Targets

    • Target

      4963ffbe4fea85cf5f0fbf33937db9e0a15b63237ac2747e0c05e7eefbc90bf0

    • Size

      186KB

    • MD5

      0e25412d99d41e9a106d2a39e46084e7

    • SHA1

      166c2105bd0eeafa7051e013399c7babda04b95a

    • SHA256

      4963ffbe4fea85cf5f0fbf33937db9e0a15b63237ac2747e0c05e7eefbc90bf0

    • SHA512

      1c5859d9839b611b83a083631f423bf039f8d11b3ef6dd9300924d6a2f751597d4c6c6ab5cae12003469cadf430a3579716fb68ce43c717ef7fc414cbae0033c

    • SSDEEP

      3072:HcaY46tGNttyCa6oARYLJXJoYtpA/H3RpDecC+EZX70RjLTu46R0Eb:M46tGdyr6ogYLjvqXRpDecw7Kj3u46db

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks