General

  • Target

    78e08728c1ad424f6f6d8a55903f4fc56b51c4806f646f8711a649626202617b

  • Size

    2.6MB

  • Sample

    241111-3yn3kazdpc

  • MD5

    102a4c10a137b207522d04e0d95b13dd

  • SHA1

    7c79dfe1c0461fcc2b3116c243eb8ae8c76121a9

  • SHA256

    78e08728c1ad424f6f6d8a55903f4fc56b51c4806f646f8711a649626202617b

  • SHA512

    aa0092e42288b36dbad9bb04ac9653fba0137177f770ef1456ebd2d64602f71cbed7988552a31ba8175466d5591e9740da42899489e78c2168e314a9c7e492f8

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bS:sxX7QnxrloE5dpUpeb

Malware Config

Targets

    • Target

      78e08728c1ad424f6f6d8a55903f4fc56b51c4806f646f8711a649626202617b

    • Size

      2.6MB

    • MD5

      102a4c10a137b207522d04e0d95b13dd

    • SHA1

      7c79dfe1c0461fcc2b3116c243eb8ae8c76121a9

    • SHA256

      78e08728c1ad424f6f6d8a55903f4fc56b51c4806f646f8711a649626202617b

    • SHA512

      aa0092e42288b36dbad9bb04ac9653fba0137177f770ef1456ebd2d64602f71cbed7988552a31ba8175466d5591e9740da42899489e78c2168e314a9c7e492f8

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBJB/bS:sxX7QnxrloE5dpUpeb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks