General

  • Target

    d051217ae7826e8bff87e5b17eba981dcbe7fdd14c6aacf08b6ae453124121b9N.exe

  • Size

    2.6MB

  • Sample

    241111-31r71azeqq

  • MD5

    75b35abc9b4517e6ff93b0a2dd67e970

  • SHA1

    0633f41b7963d0cd43c573a9766e411da40b6519

  • SHA256

    9a32ab4fdecae606f17a23a5cf011ce48171570458e24b4770b7a0cbbaaa97bc

  • SHA512

    82077ed5a79c392fde48b6cc59199d7582aa288d9b9b97b3a4ddfd5f4eacfe5075025514faaf2661664bd68c440e5a7151b8d13727cb8061514160d9fa300163

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqV:sxX7QnxrloE5dpUp4bVV

Malware Config

Targets

    • Target

      d051217ae7826e8bff87e5b17eba981dcbe7fdd14c6aacf08b6ae453124121b9N.exe

    • Size

      2.6MB

    • MD5

      75b35abc9b4517e6ff93b0a2dd67e970

    • SHA1

      0633f41b7963d0cd43c573a9766e411da40b6519

    • SHA256

      9a32ab4fdecae606f17a23a5cf011ce48171570458e24b4770b7a0cbbaaa97bc

    • SHA512

      82077ed5a79c392fde48b6cc59199d7582aa288d9b9b97b3a4ddfd5f4eacfe5075025514faaf2661664bd68c440e5a7151b8d13727cb8061514160d9fa300163

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBnB/bSqV:sxX7QnxrloE5dpUp4bVV

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks