Analysis
-
max time kernel
10s -
max time network
135s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
27-06-2021 01:22
General
-
Target
Turtlee.games/Turtlee.games.exe
-
Size
2.0MB
-
MD5
9c05c0081959c49e9a4f117f95aaf326
-
SHA1
1872b4c0f35c439a54d99b36fc476acb2e0b1e87
-
SHA256
b5d8aefa3a39ccbff01ce2e1ca76706a9b11415807e531f8f903f35e20622b65
-
SHA512
eb21a451484252b2de78614a0eaf70db23ff6c7e0b813ffdd1c331c58accdd188043fc7ce6d3fac0a574c6f40674c6b336bfb09f80a49832a834865dba8273d3
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Turtlee.games\Turtlee.games.exe"C:\Users\Admin\AppData\Local\Temp\Turtlee.games\Turtlee.games.exe"1⤵