Resubmissions

06/11/2022, 16:59

221106-vhpedsedgq10

30/09/2022, 19:00

220930-xnsecafdhk10

22/09/2022, 12:24

220922-pk8cdsfcal7

General

  • Target
    52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.bin
  • Size 184KB
  • Sample220922-pk8cdsfcal
  • SHA256 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238.bin
    • Size 184KB
    • SHA256 52fc3da5be0665ee88bba8944b8385002df205bc83d3c68e969d980227937238
    • MD5 SHA1 SHA512 SSDEEP
    • Zingo stealer

      Zingo is an info stealer first seen in March 2022.

    • Zingo stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks