General

  • Target

    73fea5c788c6c0232c089f60a09a9fc19befc7a9b1478f9fc5d36400418bfdc5

  • Size

    4.0MB

  • Sample

    241111-3q6yeazcpm

  • MD5

    60b00c29157e075a5f778e2462642a62

  • SHA1

    fd012626a4decf0d95d39159d29a1973ae738f9c

  • SHA256

    73fea5c788c6c0232c089f60a09a9fc19befc7a9b1478f9fc5d36400418bfdc5

  • SHA512

    ca33686e23571cdccd361c34a051fea4ede100a6c4e4610c09ceff62073c0e6bd0e4b63479dbe0aa86753fd4ec1152bb252ef3a0f7e7bdcee7d83b7b40eb18b3

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB/B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpIbVz8eLFcz

Malware Config

Targets

    • Target

      73fea5c788c6c0232c089f60a09a9fc19befc7a9b1478f9fc5d36400418bfdc5

    • Size

      4.0MB

    • MD5

      60b00c29157e075a5f778e2462642a62

    • SHA1

      fd012626a4decf0d95d39159d29a1973ae738f9c

    • SHA256

      73fea5c788c6c0232c089f60a09a9fc19befc7a9b1478f9fc5d36400418bfdc5

    • SHA512

      ca33686e23571cdccd361c34a051fea4ede100a6c4e4610c09ceff62073c0e6bd0e4b63479dbe0aa86753fd4ec1152bb252ef3a0f7e7bdcee7d83b7b40eb18b3

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB/B/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpIbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks