General

  • Target

    9f94d0caadfe16cb5453b297a9083499800f6c995d2ab614753579ba1c376d0eN.exe

  • Size

    2.7MB

  • Sample

    241113-x1s7eaxgpg

  • MD5

    dfad9065728a424972d848eefb44b230

  • SHA1

    f97b1fb5fea1b3ce4bbb7e3941a53083f88bf5b4

  • SHA256

    9f94d0caadfe16cb5453b297a9083499800f6c995d2ab614753579ba1c376d0e

  • SHA512

    617c71f232e8ee1fbeff86717f2c9a4a491cf96c0169252a7d8f8035b39ba02d39d2227c2f7bf60721a80ca398d476cce76ac70b166e415f938d2b9272b461c3

  • SSDEEP

    49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBp9w4S+:+R0pI/IQlUoMPdmpSpJ4X

Malware Config

Targets

    • Target

      9f94d0caadfe16cb5453b297a9083499800f6c995d2ab614753579ba1c376d0eN.exe

    • Size

      2.7MB

    • MD5

      dfad9065728a424972d848eefb44b230

    • SHA1

      f97b1fb5fea1b3ce4bbb7e3941a53083f88bf5b4

    • SHA256

      9f94d0caadfe16cb5453b297a9083499800f6c995d2ab614753579ba1c376d0e

    • SHA512

      617c71f232e8ee1fbeff86717f2c9a4a491cf96c0169252a7d8f8035b39ba02d39d2227c2f7bf60721a80ca398d476cce76ac70b166e415f938d2b9272b461c3

    • SSDEEP

      49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBp9w4S+:+R0pI/IQlUoMPdmpSpJ4X

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks