General

  • Target

    458f42647aab27159c891dd7616a41fcdbc55802fc322c1429b3d414b4b14e69.exe

  • Size

    2.6MB

  • Sample

    241113-x8enzs1nhj

  • MD5

    3621f112a209fa2351171947c82f1e0e

  • SHA1

    d51ed7b2326e4c3f365ec858042db0d6591ed7e8

  • SHA256

    458f42647aab27159c891dd7616a41fcdbc55802fc322c1429b3d414b4b14e69

  • SHA512

    00dc63b65d03377820f25da72caca1130ef326bc47f6dcef2d4eee911e604d8bc9a373142c0546115eae83e9f0792df0dac9bbff2e8db1b6fb065d14e45d7e20

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bSw:sxX7QnxrloE5dpUpfbp

Malware Config

Targets

    • Target

      458f42647aab27159c891dd7616a41fcdbc55802fc322c1429b3d414b4b14e69.exe

    • Size

      2.6MB

    • MD5

      3621f112a209fa2351171947c82f1e0e

    • SHA1

      d51ed7b2326e4c3f365ec858042db0d6591ed7e8

    • SHA256

      458f42647aab27159c891dd7616a41fcdbc55802fc322c1429b3d414b4b14e69

    • SHA512

      00dc63b65d03377820f25da72caca1130ef326bc47f6dcef2d4eee911e604d8bc9a373142c0546115eae83e9f0792df0dac9bbff2e8db1b6fb065d14e45d7e20

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBcB/bSw:sxX7QnxrloE5dpUpfbp

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks