General

  • Target

    816b619a72997591f214a1dab4aa5e227d94ac8d8a8ebe068bf06d7a8517ddb9

  • Size

    3.8MB

  • Sample

    250701-gph93asnx6

  • MD5

    69ed05d883b5a2f19cfcca3d8613950b

  • SHA1

    0a2716e349b464bbfa538ff637bb82e123870901

  • SHA256

    816b619a72997591f214a1dab4aa5e227d94ac8d8a8ebe068bf06d7a8517ddb9

  • SHA512

    9c8fc5bec797c568ed5077043c4786c69185e7273db7cf638180f65cc2434e0d0e44f6c743b421d71225603e4677e982a666e8e53fb3d15c7b730641357e8d09

  • SSDEEP

    49152:gBjZnvgdo0GVsDDkYOMwwnMb4PmyVGEDkYOMwwnMb4PmyV3:gTvggVssYOXwnS4rVGpYOXwnS4rV3

Malware Config

Targets

    • Target

      816b619a72997591f214a1dab4aa5e227d94ac8d8a8ebe068bf06d7a8517ddb9

    • Size

      3.8MB

    • MD5

      69ed05d883b5a2f19cfcca3d8613950b

    • SHA1

      0a2716e349b464bbfa538ff637bb82e123870901

    • SHA256

      816b619a72997591f214a1dab4aa5e227d94ac8d8a8ebe068bf06d7a8517ddb9

    • SHA512

      9c8fc5bec797c568ed5077043c4786c69185e7273db7cf638180f65cc2434e0d0e44f6c743b421d71225603e4677e982a666e8e53fb3d15c7b730641357e8d09

    • SSDEEP

      49152:gBjZnvgdo0GVsDDkYOMwwnMb4PmyVGEDkYOMwwnMb4PmyV3:gTvggVssYOXwnS4rVGpYOXwnS4rV3

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks