General

  • Target

    1313963b714fc1bc887b3e617d383bf32343e767dfb59e9e592d0f0aa0d79886

  • Size

    2.6MB

  • Sample

    241109-yk1rzsznd1

  • MD5

    a82d4b7bbadea3b78123806bee89ae49

  • SHA1

    a29d2d97810309cc967e0c94d4ae08fa2e9fd28d

  • SHA256

    1313963b714fc1bc887b3e617d383bf32343e767dfb59e9e592d0f0aa0d79886

  • SHA512

    f9337d0184d3f48813aedcba980b320aa2153cea398daaecdb912fff8b11f4436a0a5ebcd94b2b2e5433271560f5049e883adfe5e3d83a14ee986227c6c2106a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bS:sxX7QnxrloE5dpUpIb

Malware Config

Targets

    • Target

      1313963b714fc1bc887b3e617d383bf32343e767dfb59e9e592d0f0aa0d79886

    • Size

      2.6MB

    • MD5

      a82d4b7bbadea3b78123806bee89ae49

    • SHA1

      a29d2d97810309cc967e0c94d4ae08fa2e9fd28d

    • SHA256

      1313963b714fc1bc887b3e617d383bf32343e767dfb59e9e592d0f0aa0d79886

    • SHA512

      f9337d0184d3f48813aedcba980b320aa2153cea398daaecdb912fff8b11f4436a0a5ebcd94b2b2e5433271560f5049e883adfe5e3d83a14ee986227c6c2106a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB7B/bS:sxX7QnxrloE5dpUpIb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks