General

  • Target

    b8b2da690c2f221af86ce1d88d86d16bc8699d9e0706b132d558dfc9bf4a6376

  • Size

    3.1MB

  • Sample

    241114-q7xd3szfre

  • MD5

    b563ae12ca9291ec18defe977eada320

  • SHA1

    4d22cf3191b12dda1f21bac3a5f80a371eab2b71

  • SHA256

    b8b2da690c2f221af86ce1d88d86d16bc8699d9e0706b132d558dfc9bf4a6376

  • SHA512

    cc99891d506024a24aa866e30d1b6929598df4fd28e2a7626cfeb6f1544e31b59cf06b7867ff43e57998217b8aefce6a1fd9fcc22c9975c92a2bc8ae9bf2d6f3

  • SSDEEP

    98304:EAJbF/eB26JB6+hafAQ2NFSrsf9qgMsIZ/JUFmRT2H:xGpafS0U9q0IFYz

Malware Config

Targets

    • Target

      b8b2da690c2f221af86ce1d88d86d16bc8699d9e0706b132d558dfc9bf4a6376

    • Size

      3.1MB

    • MD5

      b563ae12ca9291ec18defe977eada320

    • SHA1

      4d22cf3191b12dda1f21bac3a5f80a371eab2b71

    • SHA256

      b8b2da690c2f221af86ce1d88d86d16bc8699d9e0706b132d558dfc9bf4a6376

    • SHA512

      cc99891d506024a24aa866e30d1b6929598df4fd28e2a7626cfeb6f1544e31b59cf06b7867ff43e57998217b8aefce6a1fd9fcc22c9975c92a2bc8ae9bf2d6f3

    • SSDEEP

      98304:EAJbF/eB26JB6+hafAQ2NFSrsf9qgMsIZ/JUFmRT2H:xGpafS0U9q0IFYz

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks