General

  • Target

    1384cc588ec40608f603b100e6fe9d1a339fc9453fc4ca46c863cd9863fc7d1b

  • Size

    48KB

  • Sample

    220930-we5gwaecd3

  • MD5

    6580d2da65d04dfc0cbef328d205c110

  • SHA1

    6b30683af7576935072e02852efc1f93b5403e7f

  • SHA256

    1384cc588ec40608f603b100e6fe9d1a339fc9453fc4ca46c863cd9863fc7d1b

  • SHA512

    664ea9c5d25d7e2d968d174724ed484364ff3c156ea0b62dda0d0ba3697c6e03de73333485cd9b974df4ae6f4a5741bb0cb1dbd9e9771dfdf8b9d5ac64b60a52

  • SSDEEP

    768:mMVu2yIe2MujWhQNHAFXVje40u+0XJ6n8cOwP0/Cj:LVbOIxyVj00ZX+

Malware Config

Targets

    • Target

      1384cc588ec40608f603b100e6fe9d1a339fc9453fc4ca46c863cd9863fc7d1b

    • Size

      48KB

    • MD5

      6580d2da65d04dfc0cbef328d205c110

    • SHA1

      6b30683af7576935072e02852efc1f93b5403e7f

    • SHA256

      1384cc588ec40608f603b100e6fe9d1a339fc9453fc4ca46c863cd9863fc7d1b

    • SHA512

      664ea9c5d25d7e2d968d174724ed484364ff3c156ea0b62dda0d0ba3697c6e03de73333485cd9b974df4ae6f4a5741bb0cb1dbd9e9771dfdf8b9d5ac64b60a52

    • SSDEEP

      768:mMVu2yIe2MujWhQNHAFXVje40u+0XJ6n8cOwP0/Cj:LVbOIxyVj00ZX+

    • Zingo stealer

      Zingo is an info stealer first seen in March 2022.

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks