General

  • Target

    5256e5a2ec283799ac5e292ca93a6ed12f9b7e105a36cdb2c852e2f12fffce09

  • Size

    4.0MB

  • Sample

    241111-2cs9qaxkfy

  • MD5

    5b9b65fc96be783b8993a2235b5b9f5b

  • SHA1

    08a99f877e47e45ea512bbe757f42fdc3c3a12d4

  • SHA256

    5256e5a2ec283799ac5e292ca93a6ed12f9b7e105a36cdb2c852e2f12fffce09

  • SHA512

    216c40a875d65d7931cf02fe24a47934dc05b53a56408969bf8eea27fe42db7ec6b204e4bf391af16e7356240b84cb4ab3d3da05bb992977b82d814a8f2841a0

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBjB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpgbVz8eLFcz

Malware Config

Targets

    • Target

      5256e5a2ec283799ac5e292ca93a6ed12f9b7e105a36cdb2c852e2f12fffce09

    • Size

      4.0MB

    • MD5

      5b9b65fc96be783b8993a2235b5b9f5b

    • SHA1

      08a99f877e47e45ea512bbe757f42fdc3c3a12d4

    • SHA256

      5256e5a2ec283799ac5e292ca93a6ed12f9b7e105a36cdb2c852e2f12fffce09

    • SHA512

      216c40a875d65d7931cf02fe24a47934dc05b53a56408969bf8eea27fe42db7ec6b204e4bf391af16e7356240b84cb4ab3d3da05bb992977b82d814a8f2841a0

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBjB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpgbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks