General

  • Target

    ea52e7568a9305fba5f1ba827fd6a139bcd541d1ca9772b416213afd86f2ce87

  • Size

    1.3MB

  • Sample

    250115-1pasgaxnap

  • MD5

    bb150d980f12b94bc043a86c2be48e61

  • SHA1

    2ba8df25d931d75beda53357f13b8899b67c090e

  • SHA256

    ea52e7568a9305fba5f1ba827fd6a139bcd541d1ca9772b416213afd86f2ce87

  • SHA512

    967d4eb3c4ab4ab2716340bf84d76b41731d49e1a7ec19baaa0f447d34864a6d28f254a0faa6dc47589c0e3ba10bfc4856154cad1d5fe79f1587e28e205b9ad1

  • SSDEEP

    12288:b09B+VdMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:b09B1SkQ/7Gb8NLEbeZ

Malware Config

Targets

    • Target

      ea52e7568a9305fba5f1ba827fd6a139bcd541d1ca9772b416213afd86f2ce87

    • Size

      1.3MB

    • MD5

      bb150d980f12b94bc043a86c2be48e61

    • SHA1

      2ba8df25d931d75beda53357f13b8899b67c090e

    • SHA256

      ea52e7568a9305fba5f1ba827fd6a139bcd541d1ca9772b416213afd86f2ce87

    • SHA512

      967d4eb3c4ab4ab2716340bf84d76b41731d49e1a7ec19baaa0f447d34864a6d28f254a0faa6dc47589c0e3ba10bfc4856154cad1d5fe79f1587e28e205b9ad1

    • SSDEEP

      12288:b09B+VdMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:b09B1SkQ/7Gb8NLEbeZ

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks