General

  • Target

    718f7636acacf4ecbd607a10ab5f01507fce1eff0a98d2fb3d52eaa2e59c400cN.exe

  • Size

    625KB

  • Sample

    241120-actrps1jam

  • MD5

    f81fd3f794c90135d6081bf31a03cba0

  • SHA1

    8743bf090c8181d90d191a5aef89c7b4b063a14e

  • SHA256

    718f7636acacf4ecbd607a10ab5f01507fce1eff0a98d2fb3d52eaa2e59c400c

  • SHA512

    0490dffcb3bdd59424f1feb7a42a3e9ad032c16f35dcd14c134e97365e9e1703d8a7d7078c83b6dec8c3a6e1eaaca4de7ce35f227c62e325c1214bd87d94cfff

  • SSDEEP

    12288:q2jSkbWcPpTCrw47psXZKI69j1N+Q2iEW52yz8y9Oed7ygHC:nRSc6wKpLIAhN8Wcyz8vYfH

Malware Config

Targets

    • Target

      718f7636acacf4ecbd607a10ab5f01507fce1eff0a98d2fb3d52eaa2e59c400cN.exe

    • Size

      625KB

    • MD5

      f81fd3f794c90135d6081bf31a03cba0

    • SHA1

      8743bf090c8181d90d191a5aef89c7b4b063a14e

    • SHA256

      718f7636acacf4ecbd607a10ab5f01507fce1eff0a98d2fb3d52eaa2e59c400c

    • SHA512

      0490dffcb3bdd59424f1feb7a42a3e9ad032c16f35dcd14c134e97365e9e1703d8a7d7078c83b6dec8c3a6e1eaaca4de7ce35f227c62e325c1214bd87d94cfff

    • SSDEEP

      12288:q2jSkbWcPpTCrw47psXZKI69j1N+Q2iEW52yz8y9Oed7ygHC:nRSc6wKpLIAhN8Wcyz8vYfH

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks