General

  • Target

    bdc40f3411bc9033c2010ffc4c7ff221ef5dfea16cfd6a855ea248b5325146a3.exe

  • Size

    2.6MB

  • Sample

    241112-tmkfkawfjl

  • MD5

    d152d531013f32b2354e7d337b3cbe64

  • SHA1

    07498acec06975e2946304f0b8e9f83be727ebf1

  • SHA256

    bdc40f3411bc9033c2010ffc4c7ff221ef5dfea16cfd6a855ea248b5325146a3

  • SHA512

    774579b3ae59c59f511d1f1fb04e4117d5070c31cb273b69baef872cbaa8637af2828c74f552c397229b4a10a4614bcfbade079bea7a5547a7f224b9ff079610

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bSS:sxX7QnxrloE5dpUpjbl

Malware Config

Targets

    • Target

      bdc40f3411bc9033c2010ffc4c7ff221ef5dfea16cfd6a855ea248b5325146a3.exe

    • Size

      2.6MB

    • MD5

      d152d531013f32b2354e7d337b3cbe64

    • SHA1

      07498acec06975e2946304f0b8e9f83be727ebf1

    • SHA256

      bdc40f3411bc9033c2010ffc4c7ff221ef5dfea16cfd6a855ea248b5325146a3

    • SHA512

      774579b3ae59c59f511d1f1fb04e4117d5070c31cb273b69baef872cbaa8637af2828c74f552c397229b4a10a4614bcfbade079bea7a5547a7f224b9ff079610

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bSS:sxX7QnxrloE5dpUpjbl

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks