General

  • Target

    f8426cfffe280deb1e147ef671b943093ed57bc59d882f5aa40c4796be481ff4.exe

  • Size

    753KB

  • Sample

    241112-xz48aasmep

  • MD5

    8ab9a61e4fbec1f5e8362879780e9b3f

  • SHA1

    c52f3410bbcec59f6a7448ae735d44178aeb0e93

  • SHA256

    f8426cfffe280deb1e147ef671b943093ed57bc59d882f5aa40c4796be481ff4

  • SHA512

    3316e38b6d2d5c717531d5532308578040eca870628a40db1b760f97d62d792b32c461f7540304aefcb8b7cc099af8fe86286718245ca5e8917ee3e9c83873b7

  • SSDEEP

    6144:PDiUIIk3dxdtAqZj3y2VCYNyRwWE5OphyRRrhd9py+2Va8BgqOTQAUp5Yz+v7sGH:PDkXAoDLNyMrYI2g+p5Bv7T

Malware Config

Targets

    • Target

      f8426cfffe280deb1e147ef671b943093ed57bc59d882f5aa40c4796be481ff4.exe

    • Size

      753KB

    • MD5

      8ab9a61e4fbec1f5e8362879780e9b3f

    • SHA1

      c52f3410bbcec59f6a7448ae735d44178aeb0e93

    • SHA256

      f8426cfffe280deb1e147ef671b943093ed57bc59d882f5aa40c4796be481ff4

    • SHA512

      3316e38b6d2d5c717531d5532308578040eca870628a40db1b760f97d62d792b32c461f7540304aefcb8b7cc099af8fe86286718245ca5e8917ee3e9c83873b7

    • SSDEEP

      6144:PDiUIIk3dxdtAqZj3y2VCYNyRwWE5OphyRRrhd9py+2Va8BgqOTQAUp5Yz+v7sGH:PDkXAoDLNyMrYI2g+p5Bv7T

    • Renames multiple (259) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks