General

  • Target
    9dfef3d3c0b740f2c1604344647af61b3780fba0ba1902df114f4b746fb166b5
  • Size 54KB
  • Sample220930-wfemvafcfk
  • SHA256 9dfef3d3c0b740f2c1604344647af61b3780fba0ba1902df114f4b746fb166b5
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      9dfef3d3c0b740f2c1604344647af61b3780fba0ba1902df114f4b746fb166b5
    • Size 54KB
    • SHA256 9dfef3d3c0b740f2c1604344647af61b3780fba0ba1902df114f4b746fb166b5
    • MD5 SHA1 SHA512 SSDEEP
    • Zingo stealer

      Zingo is an info stealer first seen in March 2022.

    • Zingo stealer payload

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks