General

  • Target

    023d4e5e95ffa500b45b131866c3d4823446f90655d5c87f2ac3a6c797584e72

  • Size

    2.6MB

  • Sample

    241112-xty43syhkr

  • MD5

    8195672172743a44843aaacc84d4c880

  • SHA1

    60da55a7f357650f65c5740285cb9da0683da9c7

  • SHA256

    023d4e5e95ffa500b45b131866c3d4823446f90655d5c87f2ac3a6c797584e72

  • SHA512

    940c1d6b2753e49923ff85da51895510b64a556cf5dbd30e58fa01c5e40a3e218d8ef51a92597d99aef84db1c5b7ac298a63a7f51fda45f4f2000f2ab5f5dc2b

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bS:sxX7QnxrloE5dpUpfb

Malware Config

Targets

    • Target

      023d4e5e95ffa500b45b131866c3d4823446f90655d5c87f2ac3a6c797584e72

    • Size

      2.6MB

    • MD5

      8195672172743a44843aaacc84d4c880

    • SHA1

      60da55a7f357650f65c5740285cb9da0683da9c7

    • SHA256

      023d4e5e95ffa500b45b131866c3d4823446f90655d5c87f2ac3a6c797584e72

    • SHA512

      940c1d6b2753e49923ff85da51895510b64a556cf5dbd30e58fa01c5e40a3e218d8ef51a92597d99aef84db1c5b7ac298a63a7f51fda45f4f2000f2ab5f5dc2b

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBsB/bS:sxX7QnxrloE5dpUpfb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks