General

  • Target

    9f72108c7449bc5f1d2e75432ede52b9df79a63aa432b3cc75f630656910f075N.exe

  • Size

    2.6MB

  • Sample

    241113-zedwpsxrg1

  • MD5

    b950f3a1c106ec1090461cf39dac18f0

  • SHA1

    ebf04825e103acaccff697c6f01951b4bdf7bdcb

  • SHA256

    9f72108c7449bc5f1d2e75432ede52b9df79a63aa432b3cc75f630656910f075

  • SHA512

    fedd3ca856cc35533c8349a6ec2a8fabeee28db77cef5b5bd6963bc5c99105e99b3a388877da6099476df8ac28890bbc2288c43ae460e2534aa5537521497f6c

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB3B/bS:sxX7QnxrloE5dpUpwb

Malware Config

Targets

    • Target

      9f72108c7449bc5f1d2e75432ede52b9df79a63aa432b3cc75f630656910f075N.exe

    • Size

      2.6MB

    • MD5

      b950f3a1c106ec1090461cf39dac18f0

    • SHA1

      ebf04825e103acaccff697c6f01951b4bdf7bdcb

    • SHA256

      9f72108c7449bc5f1d2e75432ede52b9df79a63aa432b3cc75f630656910f075

    • SHA512

      fedd3ca856cc35533c8349a6ec2a8fabeee28db77cef5b5bd6963bc5c99105e99b3a388877da6099476df8ac28890bbc2288c43ae460e2534aa5537521497f6c

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB3B/bS:sxX7QnxrloE5dpUpwb

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks