General

  • Target

    73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN.exe

  • Size

    660KB

  • Sample

    241119-pzba7sxajl

  • MD5

    b79ab5bd1e288cc622a3ede892fcd2d0

  • SHA1

    4e35192584c1744e32ec7a5cbe755597526b4438

  • SHA256

    73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66c

  • SHA512

    615ef2872d12fb571e7c93820c1a89466ef7b351a754260ffe875caac2af1de4485eece1f64e6ae310e4a558ca47c82f3db096475f4a229bb152080260413f1c

  • SSDEEP

    12288:W829hvv5MTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:W/vCSkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66cN.exe

    • Size

      660KB

    • MD5

      b79ab5bd1e288cc622a3ede892fcd2d0

    • SHA1

      4e35192584c1744e32ec7a5cbe755597526b4438

    • SHA256

      73493e2d42dc32df3ecae3f0763a10f28efcdcb0ee1fe2eb8a8127beb51aa66c

    • SHA512

      615ef2872d12fb571e7c93820c1a89466ef7b351a754260ffe875caac2af1de4485eece1f64e6ae310e4a558ca47c82f3db096475f4a229bb152080260413f1c

    • SSDEEP

      12288:W829hvv5MTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:W/vCSkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks