General

  • Target

    a7adb7f158aad1e3682a9caa06d4c6a3a8712be23d226bac974441ec0e61357e

  • Size

    56KB

  • Sample

    221029-14jzpahcf2

  • MD5

    40aabe3466f6cc08bde1fc211dd893f0

  • SHA1

    db9bb5243de8ac8b886a81d85ab3fc9c08605a1e

  • SHA256

    a7adb7f158aad1e3682a9caa06d4c6a3a8712be23d226bac974441ec0e61357e

  • SHA512

    0320a898b2d45fec47bd8b9a3583ce721e8a50d1ef6d15454fddc49ab99ed821f7d5c2688f1a4636baa85da3981b53bfb9f71a4bb20bfc35e0d5d24d19331b32

  • SSDEEP

    768:btlYaSIhhRmzpNJG59d4MDJS0WpmtoGSa2oUdvpibvrowFO:BlYaSIhcJG59djlWOoGP6BK0aO

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    www16.subdomain.com
  • Port:
    21
  • Username:
    user2501347
  • Password:
    WzfffBtl

Targets

    • Target

      a7adb7f158aad1e3682a9caa06d4c6a3a8712be23d226bac974441ec0e61357e

    • Size

      56KB

    • MD5

      40aabe3466f6cc08bde1fc211dd893f0

    • SHA1

      db9bb5243de8ac8b886a81d85ab3fc9c08605a1e

    • SHA256

      a7adb7f158aad1e3682a9caa06d4c6a3a8712be23d226bac974441ec0e61357e

    • SHA512

      0320a898b2d45fec47bd8b9a3583ce721e8a50d1ef6d15454fddc49ab99ed821f7d5c2688f1a4636baa85da3981b53bfb9f71a4bb20bfc35e0d5d24d19331b32

    • SSDEEP

      768:btlYaSIhhRmzpNJG59d4MDJS0WpmtoGSa2oUdvpibvrowFO:BlYaSIhcJG59djlWOoGP6BK0aO

    Score
    10/10
    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks