General

  • Target

    02d192483999e1acbe80fa6ee612b56d8768033a6018c9a5b95199943c82e683

  • Size

    638KB

  • Sample

    241218-n62lasyqgr

  • MD5

    16e8183843e73d742ee2f2d334b8c6c0

  • SHA1

    5167fa0c1f5771e2a24aab9c25633e81bbdae157

  • SHA256

    02d192483999e1acbe80fa6ee612b56d8768033a6018c9a5b95199943c82e683

  • SHA512

    78bf5431ddb73c4fb20de9fd3be00d8a5272a52882636f19a70b49bb871b122e35f71561dbf05aa90db8d3df815597deb1edda2e93070cc078bd7d3ee103052d

  • SSDEEP

    12288:cJpXH/IUgy21XWno5EMbU0+gIT5F7k75aps:cJpXH/idWnoaf6IE753

Malware Config

Targets

    • Target

      02d192483999e1acbe80fa6ee612b56d8768033a6018c9a5b95199943c82e683

    • Size

      638KB

    • MD5

      16e8183843e73d742ee2f2d334b8c6c0

    • SHA1

      5167fa0c1f5771e2a24aab9c25633e81bbdae157

    • SHA256

      02d192483999e1acbe80fa6ee612b56d8768033a6018c9a5b95199943c82e683

    • SHA512

      78bf5431ddb73c4fb20de9fd3be00d8a5272a52882636f19a70b49bb871b122e35f71561dbf05aa90db8d3df815597deb1edda2e93070cc078bd7d3ee103052d

    • SSDEEP

      12288:cJpXH/IUgy21XWno5EMbU0+gIT5F7k75aps:cJpXH/idWnoaf6IE753

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

MITRE ATT&CK Enterprise v15

Tasks