General

  • Target

    0dd2f7a0d2c0eacf7beb5d6f636b4f08d529fee96d35f78096f09b2f7aa842f7

  • Size

    3.2MB

  • Sample

    241113-ycx15a1peq

  • MD5

    3fd2580b2909e176e8debbafae1d188b

  • SHA1

    d293f5889ce348b0cf40bfe4ae17724be376fe2b

  • SHA256

    0dd2f7a0d2c0eacf7beb5d6f636b4f08d529fee96d35f78096f09b2f7aa842f7

  • SHA512

    df4183ede4f31cd5aa8f4c7f4a57ff7914df60602b7ff6f9639e2398392bba9c49d44fe4e589a87c75692de3ca8153d71bfbec09626b733d12f53b7aba3ebe2a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBzB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpcbVz8eLFcz

Malware Config

Targets

    • Target

      0dd2f7a0d2c0eacf7beb5d6f636b4f08d529fee96d35f78096f09b2f7aa842f7

    • Size

      3.2MB

    • MD5

      3fd2580b2909e176e8debbafae1d188b

    • SHA1

      d293f5889ce348b0cf40bfe4ae17724be376fe2b

    • SHA256

      0dd2f7a0d2c0eacf7beb5d6f636b4f08d529fee96d35f78096f09b2f7aa842f7

    • SHA512

      df4183ede4f31cd5aa8f4c7f4a57ff7914df60602b7ff6f9639e2398392bba9c49d44fe4e589a87c75692de3ca8153d71bfbec09626b733d12f53b7aba3ebe2a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBzB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpcbVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks