General

  • Target

    0e9b4d213046fa7c3d4fdb462d3e5d62154b52c64d47116e827c17f45fa52a7cN

  • Size

    2.6MB

  • Sample

    241112-acchestjbq

  • MD5

    94a78de109d25eecfc6f548b787f9fb0

  • SHA1

    e97065a979c2ed52cadfd14de9d98e540d56c8d7

  • SHA256

    0e9b4d213046fa7c3d4fdb462d3e5d62154b52c64d47116e827c17f45fa52a7c

  • SHA512

    7b6eb650b697f7d5959c873c192f62ca1890f31119a03806dfeb2cfb2243b9c726c4d443e1a91e5b69f385443298a949e70c720264a0856e25e309481eca3f14

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpib

Malware Config

Targets

    • Target

      0e9b4d213046fa7c3d4fdb462d3e5d62154b52c64d47116e827c17f45fa52a7cN

    • Size

      2.6MB

    • MD5

      94a78de109d25eecfc6f548b787f9fb0

    • SHA1

      e97065a979c2ed52cadfd14de9d98e540d56c8d7

    • SHA256

      0e9b4d213046fa7c3d4fdb462d3e5d62154b52c64d47116e827c17f45fa52a7c

    • SHA512

      7b6eb650b697f7d5959c873c192f62ca1890f31119a03806dfeb2cfb2243b9c726c4d443e1a91e5b69f385443298a949e70c720264a0856e25e309481eca3f14

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpib

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks