General

  • Target

    adc4eb9f9521b5fcaa2e76a41c76e3b439b897aefe344b6e5460876ab973b149

  • Size

    2.6MB

  • Sample

    241110-b3rkpszkdr

  • MD5

    0bb6856eb3a00807c6d2b7b08fea245f

  • SHA1

    873b6af8a3c21721956b73e407c39128fdf9172a

  • SHA256

    adc4eb9f9521b5fcaa2e76a41c76e3b439b897aefe344b6e5460876ab973b149

  • SHA512

    45eeb5e6e597299d6f1fe449529cde217ad194131db13fbfd139a89901908bb1382af46c3b48a015fb74377e37b91fd773e8beeccd56352ba412ebc92720a7c9

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBDB/bS:sxX7QnxrloE5dpUpwb

Malware Config

Targets

    • Target

      adc4eb9f9521b5fcaa2e76a41c76e3b439b897aefe344b6e5460876ab973b149

    • Size

      2.6MB

    • MD5

      0bb6856eb3a00807c6d2b7b08fea245f

    • SHA1

      873b6af8a3c21721956b73e407c39128fdf9172a

    • SHA256

      adc4eb9f9521b5fcaa2e76a41c76e3b439b897aefe344b6e5460876ab973b149

    • SHA512

      45eeb5e6e597299d6f1fe449529cde217ad194131db13fbfd139a89901908bb1382af46c3b48a015fb74377e37b91fd773e8beeccd56352ba412ebc92720a7c9

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBDB/bS:sxX7QnxrloE5dpUpwb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks