General

  • Target

    e6e50ada5b5869d252a16bebf5d65b84e0ed2d786fcd7fc684e6ed96e6279c9a

  • Size

    717KB

  • Sample

    241109-y2dzjszrcw

  • MD5

    9220081564be267e6b1412635d10e0e4

  • SHA1

    6dfb3cf797c931f9221ca2a99d41bdc92cc16afb

  • SHA256

    e6e50ada5b5869d252a16bebf5d65b84e0ed2d786fcd7fc684e6ed96e6279c9a

  • SHA512

    31966166768a5c8b1b842cf48bbf5b887a8af102a8450d5e1f51f363e01c72d84d0d672a93e0248a489046743540f2dd1d1239ff7014447f2d01452729f08913

  • SSDEEP

    12288:M3N2cfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:M3N2wLOS2opPIXV

Malware Config

Targets

    • Target

      e6e50ada5b5869d252a16bebf5d65b84e0ed2d786fcd7fc684e6ed96e6279c9a

    • Size

      717KB

    • MD5

      9220081564be267e6b1412635d10e0e4

    • SHA1

      6dfb3cf797c931f9221ca2a99d41bdc92cc16afb

    • SHA256

      e6e50ada5b5869d252a16bebf5d65b84e0ed2d786fcd7fc684e6ed96e6279c9a

    • SHA512

      31966166768a5c8b1b842cf48bbf5b887a8af102a8450d5e1f51f363e01c72d84d0d672a93e0248a489046743540f2dd1d1239ff7014447f2d01452729f08913

    • SSDEEP

      12288:M3N2cfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:M3N2wLOS2opPIXV

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks