General

  • Target
    https://cdn.discordapp.com/attachments/1116854871702908988/1525349232188325968/FabricAPI.zip?ex=6a530fac&is=6a51be2c&hm=e237f3fc0ebafea77f71ce7765180742581dc3a318e56642543fe53bde9827dc&
  • Sample260711-elljxabs2l

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1116854871702908988/1525349232188325968/FabricAPI.zip?ex=6a530fac&is=6a51be2c&hm=e237f3fc0ebafea77f71ce7765180742581dc3a318e56642543fe53bde9827dc&
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks