General
- Target 2b347adc350716a3b6156872d5bdd8d78090e7e95f1298a4f03fe34e40108cb8
- Size 5.5MB
- Sample261003-q7lyca1yev
- SHA256 2b347adc350716a3b6156872d5bdd8d78090e7e95f1298a4f03fe34e40108cb8
Score
7/10
Malware Config
Targets
-
- Target 2b347adc350716a3b6156872d5bdd8d78090e7e95f1298a4f03fe34e40108cb8
- Size 5.5MB
- SHA256 2b347adc350716a3b6156872d5bdd8d78090e7e95f1298a4f03fe34e40108cb8
Score7/10-
Executes dropped EXE
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1