General

  • Target

    7b57958d791d601d3c6122095f3fac5e3364a171016d25d48a571fb3917834b7N.exe

  • Size

    2.6MB

  • Sample

    241113-x6147sxmat

  • MD5

    2077c60c0a9a1efe62833a85469e1870

  • SHA1

    814b9c3cd92f1dc2ee95d7a0bb892dce3ff587cd

  • SHA256

    7b57958d791d601d3c6122095f3fac5e3364a171016d25d48a571fb3917834b7

  • SHA512

    b9bc0480dd72b1e78268e71b5d148788ad506a6a2daaf8f1d0a4ef17a9df744a8e74575149db83db307ee05b9b6fdf10c12d540696807feb930b1d9e79d21017

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBrB/bS:sxX7QnxrloE5dpUp8b

Malware Config

Targets

    • Target

      7b57958d791d601d3c6122095f3fac5e3364a171016d25d48a571fb3917834b7N.exe

    • Size

      2.6MB

    • MD5

      2077c60c0a9a1efe62833a85469e1870

    • SHA1

      814b9c3cd92f1dc2ee95d7a0bb892dce3ff587cd

    • SHA256

      7b57958d791d601d3c6122095f3fac5e3364a171016d25d48a571fb3917834b7

    • SHA512

      b9bc0480dd72b1e78268e71b5d148788ad506a6a2daaf8f1d0a4ef17a9df744a8e74575149db83db307ee05b9b6fdf10c12d540696807feb930b1d9e79d21017

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBrB/bS:sxX7QnxrloE5dpUp8b

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks