General

  • Target

    23fa8de36e5a3a62365f1cf2a714de8bec45279c2f0b3736946a7f6a1a81269d.exe

  • Size

    2.6MB

  • Sample

    241112-r8tj9atncs

  • MD5

    a4afd5b717d3eff8ffaac0cd73de893b

  • SHA1

    a0f022c36c027deb599e685694cb0b8b4cfcee65

  • SHA256

    23fa8de36e5a3a62365f1cf2a714de8bec45279c2f0b3736946a7f6a1a81269d

  • SHA512

    7e1ff09b29b3087931bebb614a3284a65d861a2fed50846a0b627e71517fd7e6bc937c297b10611237c680251480cb978513b3aa196e37c80dd031cea9a0ec3b

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSy:sxX7QnxrloE5dpUpZb9

Malware Config

Targets

    • Target

      23fa8de36e5a3a62365f1cf2a714de8bec45279c2f0b3736946a7f6a1a81269d.exe

    • Size

      2.6MB

    • MD5

      a4afd5b717d3eff8ffaac0cd73de893b

    • SHA1

      a0f022c36c027deb599e685694cb0b8b4cfcee65

    • SHA256

      23fa8de36e5a3a62365f1cf2a714de8bec45279c2f0b3736946a7f6a1a81269d

    • SHA512

      7e1ff09b29b3087931bebb614a3284a65d861a2fed50846a0b627e71517fd7e6bc937c297b10611237c680251480cb978513b3aa196e37c80dd031cea9a0ec3b

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBaB/bSy:sxX7QnxrloE5dpUpZb9

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks