General

  • Target

    adc9a988c81ba23d83d3b7d81e73e72d.exe

  • Size

    561KB

  • Sample

    211210-mhnh4agbd2

  • MD5

    adc9a988c81ba23d83d3b7d81e73e72d

  • SHA1

    7fa09dbf29a52ad77b397c74d78f01476952259c

  • SHA256

    0ed581af922ee6b46560a356e22c2f663faaa456fa8d77ddc486a72fac96cf46

  • SHA512

    d50397f9d25207b18a2c301e015ad8109ec97f29ff150828cde2c608d1928d986884ee754672ca0fc4e746d324d3b65d30a840f4a3d92aafd52222b29231623e

Score
10/10

Malware Config

Extracted

Family

matiex

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    alexcacapere123

Extracted

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    alexcacapere123

Targets

    • Target

      adc9a988c81ba23d83d3b7d81e73e72d.exe

    • Size

      561KB

    • MD5

      adc9a988c81ba23d83d3b7d81e73e72d

    • SHA1

      7fa09dbf29a52ad77b397c74d78f01476952259c

    • SHA256

      0ed581af922ee6b46560a356e22c2f663faaa456fa8d77ddc486a72fac96cf46

    • SHA512

      d50397f9d25207b18a2c301e015ad8109ec97f29ff150828cde2c608d1928d986884ee754672ca0fc4e746d324d3b65d30a840f4a3d92aafd52222b29231623e

    Score
    10/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks