General

  • Target

    104487b0354d53ce8b381a17c0adfa791dabd6324923b12732b8f4252d6b9635.exe

  • Size

    2.6MB

  • Sample

    241113-r23vcaxkek

  • MD5

    f4ed655e3c8be3d4647af7432506e29f

  • SHA1

    dd03a6ac19133d9b4c5f6a65eb8999120b904bf9

  • SHA256

    104487b0354d53ce8b381a17c0adfa791dabd6324923b12732b8f4252d6b9635

  • SHA512

    05e5fca0f65e23494958c630969b6911b3e8ed32601f44553c77f94cf30d1957b574088189af225e47280d83640a8c675245dd26dee598f5ded6ce67b08ad2ca

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSqX:sxX7QnxrloE5dpUpxbVX

Malware Config

Targets

    • Target

      104487b0354d53ce8b381a17c0adfa791dabd6324923b12732b8f4252d6b9635.exe

    • Size

      2.6MB

    • MD5

      f4ed655e3c8be3d4647af7432506e29f

    • SHA1

      dd03a6ac19133d9b4c5f6a65eb8999120b904bf9

    • SHA256

      104487b0354d53ce8b381a17c0adfa791dabd6324923b12732b8f4252d6b9635

    • SHA512

      05e5fca0f65e23494958c630969b6911b3e8ed32601f44553c77f94cf30d1957b574088189af225e47280d83640a8c675245dd26dee598f5ded6ce67b08ad2ca

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB6B/bSqX:sxX7QnxrloE5dpUpxbVX

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks