General

  • Target

    4e46dca50b3c0584a636aa96fa10586a48c15e8aaa5d00665b5c5647037617d8.exe

  • Size

    2.6MB

  • Sample

    241112-tw392awgll

  • MD5

    539fc5a60a83887e642032908d7036da

  • SHA1

    3eef41044f00c89423506ef2eecf54e888f95e29

  • SHA256

    4e46dca50b3c0584a636aa96fa10586a48c15e8aaa5d00665b5c5647037617d8

  • SHA512

    ad5a6bfc5f193c13438b38cf27ecd3ee7d44aed954d37f298a08941346a726136190a6ad4dc07484810203285c6eb3d5fc0d083187e37cba878c66ac2d204351

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBRB/bSC:sxX7QnxrloE5dpUpCbF

Malware Config

Targets

    • Target

      4e46dca50b3c0584a636aa96fa10586a48c15e8aaa5d00665b5c5647037617d8.exe

    • Size

      2.6MB

    • MD5

      539fc5a60a83887e642032908d7036da

    • SHA1

      3eef41044f00c89423506ef2eecf54e888f95e29

    • SHA256

      4e46dca50b3c0584a636aa96fa10586a48c15e8aaa5d00665b5c5647037617d8

    • SHA512

      ad5a6bfc5f193c13438b38cf27ecd3ee7d44aed954d37f298a08941346a726136190a6ad4dc07484810203285c6eb3d5fc0d083187e37cba878c66ac2d204351

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBRB/bSC:sxX7QnxrloE5dpUpCbF

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks