General

  • Target

    2b102cded66982153748e34e007e98cdeb713955c9e7f3678851bf3552685eda

  • Size

    4.1MB

  • Sample

    241113-zjec2ayjbz

  • MD5

    27f93fa76940590356d20a4cca741c20

  • SHA1

    99bce56ac095955cb7b852d44b73eae15fee1ed0

  • SHA256

    2b102cded66982153748e34e007e98cdeb713955c9e7f3678851bf3552685eda

  • SHA512

    0462d1b25370a581dfb9db47ca926b34dac1cff853f27dee3fea1974c485f04a51a5099f5af09f6c1d28bf0f90bdad92668e26e2271b045fa32be91a4fe7708b

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpabVz8eLFcz

Malware Config

Targets

    • Target

      2b102cded66982153748e34e007e98cdeb713955c9e7f3678851bf3552685eda

    • Size

      4.1MB

    • MD5

      27f93fa76940590356d20a4cca741c20

    • SHA1

      99bce56ac095955cb7b852d44b73eae15fee1ed0

    • SHA256

      2b102cded66982153748e34e007e98cdeb713955c9e7f3678851bf3552685eda

    • SHA512

      0462d1b25370a581dfb9db47ca926b34dac1cff853f27dee3fea1974c485f04a51a5099f5af09f6c1d28bf0f90bdad92668e26e2271b045fa32be91a4fe7708b

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpabVz8eLFcz

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks