General

  • Target
    https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a627f1b&is=6a612d9b&hm=066b8383ead917605a848892958d6ca7b1ac704a84ee4965bb7abe00d907152c&
  • Sample260723-ey23eswtbt

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a627f1b&is=6a612d9b&hm=066b8383ead917605a848892958d6ca7b1ac704a84ee4965bb7abe00d907152c&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks