General

  • Target

    08ef6bb3289c115605f1e38afa33ebb263249b29e32ab8b5b28e43ede03d4222

  • Size

    1.3MB

  • Sample

    241113-x6yzva1nfl

  • MD5

    bec55f4b17a05911d9965def89ca812d

  • SHA1

    f5a18219360a6f722edfe93b98d66c757f2c796c

  • SHA256

    08ef6bb3289c115605f1e38afa33ebb263249b29e32ab8b5b28e43ede03d4222

  • SHA512

    9d324b1f082aec5e2cdda12dff396aabc724c69dc9f2858b110a417a3aeb28697e8b6c5b619b5d58c38353f905a3f88a4806c54998cf59e73accbaa917b80874

  • SSDEEP

    12288:stOw6BaYqMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:C6B7SkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      08ef6bb3289c115605f1e38afa33ebb263249b29e32ab8b5b28e43ede03d4222

    • Size

      1.3MB

    • MD5

      bec55f4b17a05911d9965def89ca812d

    • SHA1

      f5a18219360a6f722edfe93b98d66c757f2c796c

    • SHA256

      08ef6bb3289c115605f1e38afa33ebb263249b29e32ab8b5b28e43ede03d4222

    • SHA512

      9d324b1f082aec5e2cdda12dff396aabc724c69dc9f2858b110a417a3aeb28697e8b6c5b619b5d58c38353f905a3f88a4806c54998cf59e73accbaa917b80874

    • SSDEEP

      12288:stOw6BaYqMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:C6B7SkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks