General

  • Target

    bf3970ee9e73ab791186c53926ed3398afceadcd1a432c51470ab58bb4301e74

  • Size

    1.5MB

  • Sample

    241120-drx98atrgj

  • MD5

    8855937844ca64dbc86da384342d7985

  • SHA1

    357a0cfcf62877c86d6eee3577895dedc905e680

  • SHA256

    bf3970ee9e73ab791186c53926ed3398afceadcd1a432c51470ab58bb4301e74

  • SHA512

    bbfaca51a3b59444646308bdc1bbd667b7af5933afaa0b580b9dbc64e2df833e47d1b0047f3d2234556a59181355b8eb226cf482e65cdf315fbe02eebfeb3ff6

  • SSDEEP

    24576:K+88NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:K+8gDUYmvFur31yAipQCtXxc0H

Malware Config

Targets

    • Target

      bf3970ee9e73ab791186c53926ed3398afceadcd1a432c51470ab58bb4301e74

    • Size

      1.5MB

    • MD5

      8855937844ca64dbc86da384342d7985

    • SHA1

      357a0cfcf62877c86d6eee3577895dedc905e680

    • SHA256

      bf3970ee9e73ab791186c53926ed3398afceadcd1a432c51470ab58bb4301e74

    • SHA512

      bbfaca51a3b59444646308bdc1bbd667b7af5933afaa0b580b9dbc64e2df833e47d1b0047f3d2234556a59181355b8eb226cf482e65cdf315fbe02eebfeb3ff6

    • SSDEEP

      24576:K+88NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:K+8gDUYmvFur31yAipQCtXxc0H

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks