General

  • Target

    56450f9bc403ba6c35bc59bb9009e010115fec62cc4dec2f0e731b7b3099c8dd

  • Size

    344KB

  • Sample

    221021-e36w6sbhhr

  • MD5

    765b0536202b40d23c76bcd1c4b71a28

  • SHA1

    43b249119dcdf155acdc1ea367364a49d879851f

  • SHA256

    56450f9bc403ba6c35bc59bb9009e010115fec62cc4dec2f0e731b7b3099c8dd

  • SHA512

    eaf85e39b2fa0d7c6e7cf7b04ed63377e74b3f1a03e989d05d8d0d4d7e8e233408dcc98afe899ab7676c4f257142acac61ca6f85bdf0fa56f83bdc3bca19caa8

  • SSDEEP

    6144:A/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/:A/XM4DShe9EcHPLrLZ5AICgkTP3/

Score
7/10

Malware Config

Targets

    • Target

      56450f9bc403ba6c35bc59bb9009e010115fec62cc4dec2f0e731b7b3099c8dd

    • Size

      344KB

    • MD5

      765b0536202b40d23c76bcd1c4b71a28

    • SHA1

      43b249119dcdf155acdc1ea367364a49d879851f

    • SHA256

      56450f9bc403ba6c35bc59bb9009e010115fec62cc4dec2f0e731b7b3099c8dd

    • SHA512

      eaf85e39b2fa0d7c6e7cf7b04ed63377e74b3f1a03e989d05d8d0d4d7e8e233408dcc98afe899ab7676c4f257142acac61ca6f85bdf0fa56f83bdc3bca19caa8

    • SSDEEP

      6144:A/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/:A/XM4DShe9EcHPLrLZ5AICgkTP3/

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks