General

  • Target

    f3e196ccccfde196a9f7f54389829ed0337e0b715b326c5f427e5afeba54ae2d

  • Size

    1.1MB

  • Sample

    241112-r9fpsaxrfq

  • MD5

    7dcec6cb3b6b44620882aefee483eac5

  • SHA1

    f02960fa560ca062af3e43a0177079a1e4582c88

  • SHA256

    f3e196ccccfde196a9f7f54389829ed0337e0b715b326c5f427e5afeba54ae2d

  • SHA512

    0b0a70988b632d1451d967b399606928724680091086d0c1ec2def2ef06602e86a48f73f6d8239199845990696c30f43308a9b5e00eac94d0370f95003f23516

  • SSDEEP

    24576:bBuXT9T+w6zY8v5a2FZ7WDpk2Kvfd5nP6Wp8zrMBThYBjv:bBuZ6zY8/7WDaDvfd5iQ8zoBThojv

Malware Config

Targets

    • Target

      f3e196ccccfde196a9f7f54389829ed0337e0b715b326c5f427e5afeba54ae2d

    • Size

      1.1MB

    • MD5

      7dcec6cb3b6b44620882aefee483eac5

    • SHA1

      f02960fa560ca062af3e43a0177079a1e4582c88

    • SHA256

      f3e196ccccfde196a9f7f54389829ed0337e0b715b326c5f427e5afeba54ae2d

    • SHA512

      0b0a70988b632d1451d967b399606928724680091086d0c1ec2def2ef06602e86a48f73f6d8239199845990696c30f43308a9b5e00eac94d0370f95003f23516

    • SSDEEP

      24576:bBuXT9T+w6zY8v5a2FZ7WDpk2Kvfd5nP6Wp8zrMBThYBjv:bBuZ6zY8/7WDaDvfd5iQ8zoBThojv

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks