General

  • Target

    7e784c2c3bd7404a7f853dcd99171efa8eb428756a12a0140799b4bec106adf4N.exe

  • Size

    2.6MB

  • Sample

    241113-zk575syfne

  • MD5

    a9e0f591359c68d65c357b68f6848bd6

  • SHA1

    65974f9b109d37210d8e77e1ff246d1db9d69ee6

  • SHA256

    3a08b8a021271997dec35aff7ab1da50e2e5981eaa27823b95eeda8e28811963

  • SHA512

    fc6239a8d80d1c40b8b97ac13648a412295395cc701f250b1d33c85eb228f7cb0d6a33280fb5f790509cace66bcc25478befc7fcdd2c043c0952c95267b3733a

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB/B/bSY:sxX7QnxrloE5dpUpcbZ

Malware Config

Targets

    • Target

      7e784c2c3bd7404a7f853dcd99171efa8eb428756a12a0140799b4bec106adf4N.exe

    • Size

      2.6MB

    • MD5

      a9e0f591359c68d65c357b68f6848bd6

    • SHA1

      65974f9b109d37210d8e77e1ff246d1db9d69ee6

    • SHA256

      3a08b8a021271997dec35aff7ab1da50e2e5981eaa27823b95eeda8e28811963

    • SHA512

      fc6239a8d80d1c40b8b97ac13648a412295395cc701f250b1d33c85eb228f7cb0d6a33280fb5f790509cace66bcc25478befc7fcdd2c043c0952c95267b3733a

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB/B/bSY:sxX7QnxrloE5dpUpcbZ

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks