General

  • Target

    bc247b41075e07c3f9caa63f2b67572dcb890ef5a0c468ead415fc6b943adee8N.exe

  • Size

    121KB

  • Sample

    250116-s6tmxaxles

  • MD5

    591440cc18f58ee6bc06b849e270f5e0

  • SHA1

    c1c89eab2dea08056d0dffda326bde7b767d75e9

  • SHA256

    bc247b41075e07c3f9caa63f2b67572dcb890ef5a0c468ead415fc6b943adee8

  • SHA512

    105d318c5948f99d3154d954067b0f02f6a5e7d5ca0eb1f330a183f435df0a8d5deb3fefbb98266373355e013d1a53aee36adf832ecc3558e3329cb2832e412c

  • SSDEEP

    3072:h74tACOnii3kcDFKzYbvfIsh+5rhYbpwEKT3uC:54tACrFcDFKzYbJwHEK

Malware Config

Targets

    • Target

      bc247b41075e07c3f9caa63f2b67572dcb890ef5a0c468ead415fc6b943adee8N.exe

    • Size

      121KB

    • MD5

      591440cc18f58ee6bc06b849e270f5e0

    • SHA1

      c1c89eab2dea08056d0dffda326bde7b767d75e9

    • SHA256

      bc247b41075e07c3f9caa63f2b67572dcb890ef5a0c468ead415fc6b943adee8

    • SHA512

      105d318c5948f99d3154d954067b0f02f6a5e7d5ca0eb1f330a183f435df0a8d5deb3fefbb98266373355e013d1a53aee36adf832ecc3558e3329cb2832e412c

    • SSDEEP

      3072:h74tACOnii3kcDFKzYbvfIsh+5rhYbpwEKT3uC:54tACrFcDFKzYbJwHEK

    • Phemedrone

      An information and wallet stealer written in C#.

    • Phemedrone family

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

MITRE ATT&CK Enterprise v15

Tasks