General

  • Target

    b05a60ffca46119027ad542494a5011f283045b10d3dd08f12c812b03547cb05.exe

  • Size

    2.6MB

  • Sample

    241113-rynagstdpg

  • MD5

    53967856efe5bcaf54c3baf7b5e69659

  • SHA1

    5ecd392fbe6592b2926b9676d6d1080143de24ab

  • SHA256

    b05a60ffca46119027ad542494a5011f283045b10d3dd08f12c812b03547cb05

  • SHA512

    842d3e60922d8c61bdd75846514ea75e2228e7fd04a71fdf81f8eed9493299c020c5eee373ec4fb89486fdeb29b9fb8463e36d1a5a87257c886f7944c08b9dae

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBSB/bSi:sxX7QnxrloE5dpUptbl

Malware Config

Targets

    • Target

      b05a60ffca46119027ad542494a5011f283045b10d3dd08f12c812b03547cb05.exe

    • Size

      2.6MB

    • MD5

      53967856efe5bcaf54c3baf7b5e69659

    • SHA1

      5ecd392fbe6592b2926b9676d6d1080143de24ab

    • SHA256

      b05a60ffca46119027ad542494a5011f283045b10d3dd08f12c812b03547cb05

    • SHA512

      842d3e60922d8c61bdd75846514ea75e2228e7fd04a71fdf81f8eed9493299c020c5eee373ec4fb89486fdeb29b9fb8463e36d1a5a87257c886f7944c08b9dae

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBSB/bSi:sxX7QnxrloE5dpUptbl

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks