General

  • Target

    ec8b1ee3312b133433b97107cb99fc617393c6a93c6a8349d788074e01f1b5d6.exe

  • Size

    2.6MB

  • Sample

    241113-x2hr3a1mfj

  • MD5

    bd069a584b63739678cbc311eb520f65

  • SHA1

    55ae22fd40d757009767aad4b68cd0f291886fab

  • SHA256

    ec8b1ee3312b133433b97107cb99fc617393c6a93c6a8349d788074e01f1b5d6

  • SHA512

    960a295e5ee5e3f75764c0884dd697537033ba9e3565a5e8866cb0898c2e66a803fc10f38e128f09df939cc165e0c861a4bbae73fc8456fd665dfa42cc4603c7

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBtB/bSC:sxX7QnxrloE5dpUpCb9

Malware Config

Targets

    • Target

      ec8b1ee3312b133433b97107cb99fc617393c6a93c6a8349d788074e01f1b5d6.exe

    • Size

      2.6MB

    • MD5

      bd069a584b63739678cbc311eb520f65

    • SHA1

      55ae22fd40d757009767aad4b68cd0f291886fab

    • SHA256

      ec8b1ee3312b133433b97107cb99fc617393c6a93c6a8349d788074e01f1b5d6

    • SHA512

      960a295e5ee5e3f75764c0884dd697537033ba9e3565a5e8866cb0898c2e66a803fc10f38e128f09df939cc165e0c861a4bbae73fc8456fd665dfa42cc4603c7

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBtB/bSC:sxX7QnxrloE5dpUpCb9

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks