General

  • Target

    faf1eb51d5684b6e933b922488c76f992e6d7f4a235f67e1dd46471d0816578aN.exe

  • Size

    2.6MB

  • Sample

    241112-wf4lzaxhlr

  • MD5

    ee24bedf4a2c81de9e06d4f0b3611cb0

  • SHA1

    957e96ce0de6cb6da073e5fc9e648fd4c18fc961

  • SHA256

    faf1eb51d5684b6e933b922488c76f992e6d7f4a235f67e1dd46471d0816578a

  • SHA512

    575357bea7a8706cf29211e36c473b1b0fb48ea15388fa7e8f57db7ecf7e4f724fe5273243d36e168d0bd5356797b1392dcaca81e857ea8f778cbfd69c7e855a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bSq:sxX7QnxrloE5dpUpebV

Malware Config

Targets

    • Target

      faf1eb51d5684b6e933b922488c76f992e6d7f4a235f67e1dd46471d0816578aN.exe

    • Size

      2.6MB

    • MD5

      ee24bedf4a2c81de9e06d4f0b3611cb0

    • SHA1

      957e96ce0de6cb6da073e5fc9e648fd4c18fc961

    • SHA256

      faf1eb51d5684b6e933b922488c76f992e6d7f4a235f67e1dd46471d0816578a

    • SHA512

      575357bea7a8706cf29211e36c473b1b0fb48ea15388fa7e8f57db7ecf7e4f724fe5273243d36e168d0bd5356797b1392dcaca81e857ea8f778cbfd69c7e855a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBZB/bSq:sxX7QnxrloE5dpUpebV

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks