General

  • Target

    878bfab9750b5870bae14a14bec15bfb2cd63ea4e5f253afb0fe722c3ced9fb3N

  • Size

    2.6MB

  • Sample

    241109-zvtxvs1nfx

  • MD5

    911e278c7ebe67f46e96567d309b9cb0

  • SHA1

    b7be4d634155875a57e1b696b4945f577b3ce1f8

  • SHA256

    878bfab9750b5870bae14a14bec15bfb2cd63ea4e5f253afb0fe722c3ced9fb3

  • SHA512

    cb9b2cfebf105e1bc4e6b8c3c34034f96082f0aafc155126cce23a4ca08d514954a605a3bcc47eb9df15373367d6245b91cf3d3deb58cd3b3941b2aaeabf049f

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBKB/bS:sxX7QnxrloE5dpUpFb

Malware Config

Targets

    • Target

      878bfab9750b5870bae14a14bec15bfb2cd63ea4e5f253afb0fe722c3ced9fb3N

    • Size

      2.6MB

    • MD5

      911e278c7ebe67f46e96567d309b9cb0

    • SHA1

      b7be4d634155875a57e1b696b4945f577b3ce1f8

    • SHA256

      878bfab9750b5870bae14a14bec15bfb2cd63ea4e5f253afb0fe722c3ced9fb3

    • SHA512

      cb9b2cfebf105e1bc4e6b8c3c34034f96082f0aafc155126cce23a4ca08d514954a605a3bcc47eb9df15373367d6245b91cf3d3deb58cd3b3941b2aaeabf049f

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBKB/bS:sxX7QnxrloE5dpUpFb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks