General
- Target BrMods.exe
- Size 8.5MB
- Sample260802-v4benaxgpe
- SHA256 6387e50afb8ce756dd680530c3e6c8a6520f9916245fdde484ef60473a218b58
- MD5 ab85aa83830349424b80f49818af1c2d
- SHA1 6c18319bbfc88b5a9c7c3b4cac6f312d7e77e50e
- SHA512 07f5fecd8aed16e8944a0a1e78f6fc15e8b9d3e47817a4b2eee4bf4aa97b339e3cf300c24b08f14b09c759b8483c8d06897e8e8dfae468d2def370300e747654
- SSDEEP 196608:lacJLUdnFOCn40pmKW6bk2wYC/gaL5eqFjwGZaGSintdDFRo:lKxRXW6p6xHwMaPedDFRo
- TLSH T18D96129039E151BDE197CB31D24A36FDE4993ADA0D76941F7FC606022A30892CDE6F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target BrMods.exe
- Size 8.5MB
- SHA256 6387e50afb8ce756dd680530c3e6c8a6520f9916245fdde484ef60473a218b58
- MD5 ab85aa83830349424b80f49818af1c2d
- SHA1 6c18319bbfc88b5a9c7c3b4cac6f312d7e77e50e
- SHA512 07f5fecd8aed16e8944a0a1e78f6fc15e8b9d3e47817a4b2eee4bf4aa97b339e3cf300c24b08f14b09c759b8483c8d06897e8e8dfae468d2def370300e747654
- SSDEEP 196608:lacJLUdnFOCn40pmKW6bk2wYC/gaL5eqFjwGZaGSintdDFRo:lKxRXW6p6xHwMaPedDFRo
- TLSH T18D96129039E151BDE197CB31D24A36FDE4993ADA0D76941F7FC606022A30892CDE6F36
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1