General

  • Target
    https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a54a75b&is=6a5355db&hm=94b6bc308c1b7d62b6cefd0f108881697c596c4ed747118ba364f9b68e6b8352&
  • Sample260712-v9kwaaew6m

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a54a75b&is=6a5355db&hm=94b6bc308c1b7d62b6cefd0f108881697c596c4ed747118ba364f9b68e6b8352&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks