General

  • Target
    0783585328aa96695c4412282b96cb03dffe79a1c5e68625bbad983ad9ef24f9.zip
  • Size 520KB
  • Sample260522-pc1btaav5k
  • SHA256 dcca47394f53ab64d37e476a78f645e20afd8884dee0922be89d5fed0d18d317
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      0783585328aa96695c4412282b96cb03dffe79a1c5e68625bbad983ad9ef24f9.exe
    • Size 565KB
    • SHA256 0783585328aa96695c4412282b96cb03dffe79a1c5e68625bbad983ad9ef24f9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops startup file

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v16

Tasks