General

  • Target
    https://cdn.discordapp.com/attachments/1516475913749921944/1522937711126646924/mrbenspammer_1.exe?ex=6a4a49c5&is=6a48f845&hm=7fa21cc8b5c78515ecec6d570945018e137ef6441f4cbab829935600bdc480fb&
  • Sample260704-pcvrbsay6k

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1516475913749921944/1522937711126646924/mrbenspammer_1.exe?ex=6a4a49c5&is=6a48f845&hm=7fa21cc8b5c78515ecec6d570945018e137ef6441f4cbab829935600bdc480fb&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks