General

  • Target
    https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a6327db&is=6a61d65b&hm=2bacd21eafd297d33cd9b3654fea2dae1c2cb32ebcf405d420b78d7dc8906f13&
  • Sample260723-txsjxssfnd

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1513523078490226868/1523069068477862110/mrbenspammer.exe?ex=6a6327db&is=6a61d65b&hm=2bacd21eafd297d33cd9b3654fea2dae1c2cb32ebcf405d420b78d7dc8906f13&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks