General

  • Target

    2b9c556dffd494e985fb6ee447663bce1819b7ed52a5013d083c6402789f53e5.exe

  • Size

    546KB

  • Sample

    250119-yfqffstkhj

  • MD5

    3fbf74f0f5a7234b251d1f11c732d677

  • SHA1

    eb4464eaf3ce70d67c97ab4dcb7390fd7e8f5e9f

  • SHA256

    2b9c556dffd494e985fb6ee447663bce1819b7ed52a5013d083c6402789f53e5

  • SHA512

    16da9e9d8dc8524ea9cdac13aa55471e72ea35fb6624b9d7070f43abf8e8fcaa0d6334fe5e5e1323005e4c3aec519c4a9a4765f11c6aa2631298dbcb24c76960

  • SSDEEP

    12288:NSiKVtSG2dKqs1+CneWrN557DfLque1VA0g7QTMMlx:NvAiT+55nfuue1mdQTMMlx

Malware Config

Targets

    • Target

      2b9c556dffd494e985fb6ee447663bce1819b7ed52a5013d083c6402789f53e5.exe

    • Size

      546KB

    • MD5

      3fbf74f0f5a7234b251d1f11c732d677

    • SHA1

      eb4464eaf3ce70d67c97ab4dcb7390fd7e8f5e9f

    • SHA256

      2b9c556dffd494e985fb6ee447663bce1819b7ed52a5013d083c6402789f53e5

    • SHA512

      16da9e9d8dc8524ea9cdac13aa55471e72ea35fb6624b9d7070f43abf8e8fcaa0d6334fe5e5e1323005e4c3aec519c4a9a4765f11c6aa2631298dbcb24c76960

    • SSDEEP

      12288:NSiKVtSG2dKqs1+CneWrN557DfLque1VA0g7QTMMlx:NvAiT+55nfuue1mdQTMMlx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks