General

  • Target

    8187046597.zip

  • Size

    3KB

  • Sample

    221018-tnmmbagfgp

  • MD5

    0e561f5eb781bbcec3b9b85fdf88ba02

  • SHA1

    3f421a3dbae957cab23af8929bf3d75ae90119e2

  • SHA256

    cdc818d9984323815846a5d3f28c78c05141f116f9db15f5f61826890ee18e4f

  • SHA512

    aedbcaaefc04009af97dd4c881e4a6722d42d1b861de38317e0845790393fa3fc9a1fe1f0ff62e3d25a313c7b08778cde1fb67e968c80592d9cffb85366d4846

Score
10/10

Malware Config

Extracted

Family

erbium

C2

http://77.73.133.53/cloud/index.php

Targets

    • Target

      1216d95c615702dbcdec6733bc6053c7c6f00b0e6c9d8fb86e237fa991f1e1ed

    • Size

      9KB

    • MD5

      a8e77e42012123d976f667fe8129e137

    • SHA1

      6cc36fec69d74ab9bb2aef0d6dfb749a1d872890

    • SHA256

      1216d95c615702dbcdec6733bc6053c7c6f00b0e6c9d8fb86e237fa991f1e1ed

    • SHA512

      11c68baccb88c0c0726bad7d440a462c1b89c0f7cf3dc3365a7dd487a7b68d2af068e55e52ac648a3595668a238e20eb80a70390fcef075845428424228242f0

    • SSDEEP

      96:3m2unjKp7Y5DkYoCYNiESNfWNsn8WEmO8qQuD1oCbyRTq8Q0iitFS32hWN3QU:3Kup7iDkYDxNeNejEmO8q7xlbuTXjL3

    Score
    10/10
    • Erbium

      Erbium is an infostealer written in C++ and first seen in July 2022.

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks