Resubmissions

12-10-2021 16:28

211012-ty57eacgd8 7

12-10-2021 11:11

211012-nae3esccb9 10

General

  • Target

    eb20f12dd433c5c9174bc138d1c44266cc3a36f59fae9ddae8c0f246943c8801

  • Size

    1.2MB

  • Sample

    211012-nae3esccb9

  • MD5

    6e667db54814bbf9cde7c00a1f9ccaad

  • SHA1

    a2feadc2e292c60436f63cdc17a7a61ed78b9859

  • SHA256

    eb20f12dd433c5c9174bc138d1c44266cc3a36f59fae9ddae8c0f246943c8801

  • SHA512

    c77f5395a188feae436ac88d675d215d220bbd0fdd659522d99140c5add8edfa17f8447ce8f56f17ff22f51a2aac21ca393c01b8c46093c1c5080f9f4f3427ba

Malware Config

Targets

    • Target

      eb20f12dd433c5c9174bc138d1c44266cc3a36f59fae9ddae8c0f246943c8801

    • Size

      1.2MB

    • MD5

      6e667db54814bbf9cde7c00a1f9ccaad

    • SHA1

      a2feadc2e292c60436f63cdc17a7a61ed78b9859

    • SHA256

      eb20f12dd433c5c9174bc138d1c44266cc3a36f59fae9ddae8c0f246943c8801

    • SHA512

      c77f5395a188feae436ac88d675d215d220bbd0fdd659522d99140c5add8edfa17f8447ce8f56f17ff22f51a2aac21ca393c01b8c46093c1c5080f9f4f3427ba

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Enterprise v6

Tasks