General

  • Target

    aab4bc1f2224872c6062135833fb65077ead0138fafd0b18c4883da406f73d87.exe

  • Size

    2.6MB

  • Sample

    241113-ydv8xs1pfr

  • MD5

    c00d18b116323df449b8d4ecc24a818c

  • SHA1

    3f27125557e6b52d12f5f7f087ec738c47d8d7c0

  • SHA256

    aab4bc1f2224872c6062135833fb65077ead0138fafd0b18c4883da406f73d87

  • SHA512

    84d2f6897676ad4d01a083dfed54e2977973987d091b19f336857cb44f089b7e21f8dec685afff13eb0f2ee3498c2be65c656858d8a0016cece2c8ef0d13f6f6

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bSS:sxX7QnxrloE5dpUp7bN

Malware Config

Targets

    • Target

      aab4bc1f2224872c6062135833fb65077ead0138fafd0b18c4883da406f73d87.exe

    • Size

      2.6MB

    • MD5

      c00d18b116323df449b8d4ecc24a818c

    • SHA1

      3f27125557e6b52d12f5f7f087ec738c47d8d7c0

    • SHA256

      aab4bc1f2224872c6062135833fb65077ead0138fafd0b18c4883da406f73d87

    • SHA512

      84d2f6897676ad4d01a083dfed54e2977973987d091b19f336857cb44f089b7e21f8dec685afff13eb0f2ee3498c2be65c656858d8a0016cece2c8ef0d13f6f6

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBAB/bSS:sxX7QnxrloE5dpUp7bN

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks