General

  • Target

    47a5268baa96d6f37f7d9e72cd8f5bc9d9b54dc82929085ad94e93c62f3ccfb1N.exe

  • Size

    495KB

  • Sample

    241112-yjyk8synbv

  • MD5

    e47ad2e18567f99f23d0ef8eb407aab0

  • SHA1

    2911993a3902c01ef911ef1e88c7b9763d62ff30

  • SHA256

    47a5268baa96d6f37f7d9e72cd8f5bc9d9b54dc82929085ad94e93c62f3ccfb1

  • SHA512

    d2aa91fed36d0eaf9a0af459bdde6bf997489a1e87eda0d43c05242c8e26497a201e0902177a14a1623a3bc3e374a50b02433942f44b82ff62700b4f3003a497

  • SSDEEP

    6144:PDWg5mw7P2TUOUrxZUfjb9vArQTCC7JO/UVbo4Wp4hzvNUXITiXt9Z+M47iUlfZD:PDWgOUOu+ZUVluzvNU4TEYic9

Malware Config

Targets

    • Target

      47a5268baa96d6f37f7d9e72cd8f5bc9d9b54dc82929085ad94e93c62f3ccfb1N.exe

    • Size

      495KB

    • MD5

      e47ad2e18567f99f23d0ef8eb407aab0

    • SHA1

      2911993a3902c01ef911ef1e88c7b9763d62ff30

    • SHA256

      47a5268baa96d6f37f7d9e72cd8f5bc9d9b54dc82929085ad94e93c62f3ccfb1

    • SHA512

      d2aa91fed36d0eaf9a0af459bdde6bf997489a1e87eda0d43c05242c8e26497a201e0902177a14a1623a3bc3e374a50b02433942f44b82ff62700b4f3003a497

    • SSDEEP

      6144:PDWg5mw7P2TUOUrxZUfjb9vArQTCC7JO/UVbo4Wp4hzvNUXITiXt9Z+M47iUlfZD:PDWgOUOu+ZUVluzvNU4TEYic9

    • Renames multiple (256) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks