General

  • Target

    d486166064dd49f907475a3153eabbb9da98782c5fc73ca77d23a47ac9fa563cN.exe

  • Size

    1.5MB

  • Sample

    241119-qjr5fs1nbq

  • MD5

    42dffda7afa826221343d37e53a35c20

  • SHA1

    64731e64aafef9081333e2254ec8e321e57e560a

  • SHA256

    d486166064dd49f907475a3153eabbb9da98782c5fc73ca77d23a47ac9fa563c

  • SHA512

    f3a3f01d5a271679d3d20370033df74f4680be26df3e661cbb35b0033c15e5722decb8bc9abaf9d38bcdf2af3d9bb30708d0bab5cadb188b0b9660609f1ae001

  • SSDEEP

    24576:kPjOIKX53RTh0tFda3SSkQ/7Gb8NLEbeZ:krOz53RTqti7kQ/qoLEw

Malware Config

Targets

    • Target

      d486166064dd49f907475a3153eabbb9da98782c5fc73ca77d23a47ac9fa563cN.exe

    • Size

      1.5MB

    • MD5

      42dffda7afa826221343d37e53a35c20

    • SHA1

      64731e64aafef9081333e2254ec8e321e57e560a

    • SHA256

      d486166064dd49f907475a3153eabbb9da98782c5fc73ca77d23a47ac9fa563c

    • SHA512

      f3a3f01d5a271679d3d20370033df74f4680be26df3e661cbb35b0033c15e5722decb8bc9abaf9d38bcdf2af3d9bb30708d0bab5cadb188b0b9660609f1ae001

    • SSDEEP

      24576:kPjOIKX53RTh0tFda3SSkQ/7Gb8NLEbeZ:krOz53RTqti7kQ/qoLEw

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks