General

  • Target

    12e239df70bfbf455768062b7cb2b00dc11510110ccb4ec05a7f10672a166d91

  • Size

    2.6MB

  • Sample

    241112-sc86havfpq

  • MD5

    1ae5f1c6073b4575d29ee78fc1d4ef20

  • SHA1

    82e45da0157631267d5e7d34e719e1e4974ade07

  • SHA256

    12e239df70bfbf455768062b7cb2b00dc11510110ccb4ec05a7f10672a166d91

  • SHA512

    8ad907de10c3c3fbb705ec285c2573ecdf04b01468d15fd2bb1e5132298c250d11f6321937cebde5c2b8247aa49bb80abba900725f80c9a8dab2425023ec1519

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSq:sxX7QnxrloE5dpUp9bV

Malware Config

Targets

    • Target

      12e239df70bfbf455768062b7cb2b00dc11510110ccb4ec05a7f10672a166d91

    • Size

      2.6MB

    • MD5

      1ae5f1c6073b4575d29ee78fc1d4ef20

    • SHA1

      82e45da0157631267d5e7d34e719e1e4974ade07

    • SHA256

      12e239df70bfbf455768062b7cb2b00dc11510110ccb4ec05a7f10672a166d91

    • SHA512

      8ad907de10c3c3fbb705ec285c2573ecdf04b01468d15fd2bb1e5132298c250d11f6321937cebde5c2b8247aa49bb80abba900725f80c9a8dab2425023ec1519

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSq:sxX7QnxrloE5dpUp9bV

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks