General

  • Target
    https://privatebin.net/?1c4e0d3012fa0300#3Zh1G4e7Vuy6fhL5rzb11vxcVHHA4SkmdFCcLdYUzCPd
  • Sample260511-p795hady2m

Malware Config

Targets

    • Target
      https://privatebin.net/?1c4e0d3012fa0300#3Zh1G4e7Vuy6fhL5rzb11vxcVHHA4SkmdFCcLdYUzCPd
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks