General

  • Target

    c22a65bb055439078267ad8a2e7672962ff3a0b724a41cf2590c9265d2b71f82

  • Size

    761KB

  • Sample

    241109-y7b25s1gnk

  • MD5

    9c74546a1a1cca567b695d4a3e85b4f8

  • SHA1

    218ec9ad9b5e6f54bd2d252fc342236b63da7c83

  • SHA256

    c22a65bb055439078267ad8a2e7672962ff3a0b724a41cf2590c9265d2b71f82

  • SHA512

    b9238e5abfd49b521e10fe5f85af2c75205fbed8ff7fa8b72d9e98992c705842d1529bb9b8a0047aa72ec3eac0f497b98bbf4c4b291ca5f0c3e66e4c1f153304

  • SSDEEP

    12288:m3N22Gboup+VHKBX3jbgS/Wg0MIn7ou8XBKsHKZycUQUfXJvA:m3N222kHKlzcS/0MInsu8uZycUfvA

Malware Config

Targets

    • Target

      c22a65bb055439078267ad8a2e7672962ff3a0b724a41cf2590c9265d2b71f82

    • Size

      761KB

    • MD5

      9c74546a1a1cca567b695d4a3e85b4f8

    • SHA1

      218ec9ad9b5e6f54bd2d252fc342236b63da7c83

    • SHA256

      c22a65bb055439078267ad8a2e7672962ff3a0b724a41cf2590c9265d2b71f82

    • SHA512

      b9238e5abfd49b521e10fe5f85af2c75205fbed8ff7fa8b72d9e98992c705842d1529bb9b8a0047aa72ec3eac0f497b98bbf4c4b291ca5f0c3e66e4c1f153304

    • SSDEEP

      12288:m3N22Gboup+VHKBX3jbgS/Wg0MIn7ou8XBKsHKZycUQUfXJvA:m3N222kHKlzcS/0MInsu8uZycUfvA

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks