General

  • Target

    80716ba0ed1e7428a2efc31f50b558f7b2741f1536bf7e4b209007b96ce8eecfN.exe

  • Size

    2.6MB

  • Sample

    241112-tewhvsvmby

  • MD5

    4a3c1166e8c5ddf1b9b11a95660b92e0

  • SHA1

    3e348fd574e317361bdf3da20c8910aaff25b8f7

  • SHA256

    80716ba0ed1e7428a2efc31f50b558f7b2741f1536bf7e4b209007b96ce8eecf

  • SHA512

    a5849155832871b15faf108377294c713d1d7564709383e37852d1eb9466629da6bbdacfe700de8ea9cf359a7fa3bfaf9caddda0480da95e29844f13e4634bf2

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bS:sxX7QnxrloE5dpUppb

Malware Config

Targets

    • Target

      80716ba0ed1e7428a2efc31f50b558f7b2741f1536bf7e4b209007b96ce8eecfN.exe

    • Size

      2.6MB

    • MD5

      4a3c1166e8c5ddf1b9b11a95660b92e0

    • SHA1

      3e348fd574e317361bdf3da20c8910aaff25b8f7

    • SHA256

      80716ba0ed1e7428a2efc31f50b558f7b2741f1536bf7e4b209007b96ce8eecf

    • SHA512

      a5849155832871b15faf108377294c713d1d7564709383e37852d1eb9466629da6bbdacfe700de8ea9cf359a7fa3bfaf9caddda0480da95e29844f13e4634bf2

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBeB/bS:sxX7QnxrloE5dpUppb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks