General

  • Target
    qygt3qbac6ueasrm.exe
  • Size 759KB
  • Sample260922-pgdnlssxe1
  • SHA256 f034e0899c7abd0e857fa04ba699a9c68f332311392eae4e6087515c0bf8c306
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      qygt3qbac6ueasrm.exe
    • Size 759KB
    • SHA256 f034e0899c7abd0e857fa04ba699a9c68f332311392eae4e6087515c0bf8c306
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks