General

  • Target

    5a0a51b605b47cabd1e3d9bcb9a83d0ca22c668d6f3b02a8911ea97cf7cccb58

  • Size

    2.6MB

  • Sample

    241111-2lz4ma1qer

  • MD5

    08b74dc26837fa7648972364df58c49c

  • SHA1

    6ee03b99de623f3862d8bf2bb4ad3b6ae17df105

  • SHA256

    5a0a51b605b47cabd1e3d9bcb9a83d0ca22c668d6f3b02a8911ea97cf7cccb58

  • SHA512

    682705d7a84b736ce42b488529b7431946909d05d4d7b18e9aac29df12b0e94cd3dc97ccaa4b1efe8f166e2ec126066375435a4bcc24b257c9f6906fb90c758a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bS:sxX7QnxrloE5dpUpDb

Malware Config

Targets

    • Target

      5a0a51b605b47cabd1e3d9bcb9a83d0ca22c668d6f3b02a8911ea97cf7cccb58

    • Size

      2.6MB

    • MD5

      08b74dc26837fa7648972364df58c49c

    • SHA1

      6ee03b99de623f3862d8bf2bb4ad3b6ae17df105

    • SHA256

      5a0a51b605b47cabd1e3d9bcb9a83d0ca22c668d6f3b02a8911ea97cf7cccb58

    • SHA512

      682705d7a84b736ce42b488529b7431946909d05d4d7b18e9aac29df12b0e94cd3dc97ccaa4b1efe8f166e2ec126066375435a4bcc24b257c9f6906fb90c758a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bS:sxX7QnxrloE5dpUpDb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks