General

  • Target

    5e5e99a8678bd1975a817694a75ab01a7ae47648bdb5ba24dcf93c0280a0e74fN.exe

  • Size

    1.6MB

  • Sample

    250115-1wvq8awpcs

  • MD5

    e0e75c2d92d0c5cd58f732ec8097c560

  • SHA1

    5fbad4dce37ee65b6e20e69be833d32586f51803

  • SHA256

    5e5e99a8678bd1975a817694a75ab01a7ae47648bdb5ba24dcf93c0280a0e74f

  • SHA512

    3f6463c2bf28892628eb814834e2bd0f96cddcf1ced679ae7c1ebe08a4ca8e2c0b1aa884acf46df54d23e6afecfa6b5e539bb97617e3e16626a6be872e31a56a

  • SSDEEP

    24576:aXYxCsn3cuHRHOgXe4i7ojhsP5Lgrk1TWb4AN5:Vn3cihe30jaNf1TWbdz

Malware Config

Targets

    • Target

      5e5e99a8678bd1975a817694a75ab01a7ae47648bdb5ba24dcf93c0280a0e74fN.exe

    • Size

      1.6MB

    • MD5

      e0e75c2d92d0c5cd58f732ec8097c560

    • SHA1

      5fbad4dce37ee65b6e20e69be833d32586f51803

    • SHA256

      5e5e99a8678bd1975a817694a75ab01a7ae47648bdb5ba24dcf93c0280a0e74f

    • SHA512

      3f6463c2bf28892628eb814834e2bd0f96cddcf1ced679ae7c1ebe08a4ca8e2c0b1aa884acf46df54d23e6afecfa6b5e539bb97617e3e16626a6be872e31a56a

    • SSDEEP

      24576:aXYxCsn3cuHRHOgXe4i7ojhsP5Lgrk1TWb4AN5:Vn3cihe30jaNf1TWbdz

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks