General
- Target 25761ca5e8b5559f106aed669dbf4a078c5b50b4f011c04cf89d0f7a98cc2097.exe
- Size 27.0MB
- Sample260702-mp763sev7m
- SHA256 25761ca5e8b5559f106aed669dbf4a078c5b50b4f011c04cf89d0f7a98cc2097
Score
7/10
Malware Config
Targets
-
- Target 25761ca5e8b5559f106aed669dbf4a078c5b50b4f011c04cf89d0f7a98cc2097.exe
- Size 27.0MB
- SHA256 25761ca5e8b5559f106aed669dbf4a078c5b50b4f011c04cf89d0f7a98cc2097
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Scheduled Task/Job
1Scheduled Task
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1