General

  • Target

    595142ac0ecaf32e5cd9a477f440bac99b52dcc6c2fa083424d5007fdf0caeec

  • Size

    2.3MB

  • Sample

    220725-h8y1asbbgl

  • MD5

    09e7df1b7af441df97311eb490cf6253

  • SHA1

    71542eba588e5500118a46e6918f6b19f9e69b66

  • SHA256

    595142ac0ecaf32e5cd9a477f440bac99b52dcc6c2fa083424d5007fdf0caeec

  • SHA512

    3ffa81253d97ba5317385fbe635038f81ef6b7f50d17c5ab868efb194d0185cc8bc0e2a4ceb576705bc0c9a066df54f7c0ac18ea332f1aa93a51c60fa9d353aa

Malware Config

Targets

    • Target

      595142ac0ecaf32e5cd9a477f440bac99b52dcc6c2fa083424d5007fdf0caeec

    • Size

      2.3MB

    • MD5

      09e7df1b7af441df97311eb490cf6253

    • SHA1

      71542eba588e5500118a46e6918f6b19f9e69b66

    • SHA256

      595142ac0ecaf32e5cd9a477f440bac99b52dcc6c2fa083424d5007fdf0caeec

    • SHA512

      3ffa81253d97ba5317385fbe635038f81ef6b7f50d17c5ab868efb194d0185cc8bc0e2a4ceb576705bc0c9a066df54f7c0ac18ea332f1aa93a51c60fa9d353aa

    • suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

      suricata: ET MALWARE Trojan Generic - POST To gate.php with no referer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

2
T1081

Collection

Data from Local System

2
T1005

Tasks