General

  • Target

    61eb09906763cc937a71284662445d56df1b86cc732efd41622e8fead2d5a3b7.exe

  • Size

    2.6MB

  • Sample

    241113-zcc7dsskbl

  • MD5

    41a47fee50385615df066e9634b7c67a

  • SHA1

    b44ea35b6612e3d8a1e27124ce79379a8c49b2c2

  • SHA256

    61eb09906763cc937a71284662445d56df1b86cc732efd41622e8fead2d5a3b7

  • SHA512

    85494321030b51ba2cd9aa70b88b93b3b3e7df45035d3fe03e7d222ccd17169ef9afb1a4402172f9d6627728285b86a2795dc0913c33957e8933b7da735ae087

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bSi:sxX7QnxrloE5dpUpObt

Malware Config

Targets

    • Target

      61eb09906763cc937a71284662445d56df1b86cc732efd41622e8fead2d5a3b7.exe

    • Size

      2.6MB

    • MD5

      41a47fee50385615df066e9634b7c67a

    • SHA1

      b44ea35b6612e3d8a1e27124ce79379a8c49b2c2

    • SHA256

      61eb09906763cc937a71284662445d56df1b86cc732efd41622e8fead2d5a3b7

    • SHA512

      85494321030b51ba2cd9aa70b88b93b3b3e7df45035d3fe03e7d222ccd17169ef9afb1a4402172f9d6627728285b86a2795dc0913c33957e8933b7da735ae087

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBFB/bSi:sxX7QnxrloE5dpUpObt

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks