General

  • Target
    SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
  • Size 8KB
  • Sample221013-17x1qagcf7
  • SHA256 cb05606b742226130a4e421b47b04bee21b4da79bb883c15a3c6a9002d8dfa7d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
    • Size 8KB
    • SHA256 cb05606b742226130a4e421b47b04bee21b4da79bb883c15a3c6a9002d8dfa7d
    • MD5 SHA1 SHA512 SSDEEP
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks