Overview

overview

8

Static

static

Nord VPN B...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nord VPN Brute Checker By MTSoftCrack.rar

  • Size

    345KB

  • Sample

    221125-s1exkagf33

  • MD5

    cd67a253d1eadfa8cb5c5321f7357282

  • SHA1

    b2ce755f8709e0839358de51b9dc32ab1db8c313

  • SHA256

    0842bdbdb5447154f1296b9897f3ca4bbce1941458e2c0e43b34463017e754de

  • SHA512

    16dc3519ff6006acf29bdbed050e8632b9f6a38b1719e847d22b3036bd8ed7ad9035888e876f4147f98474de986d4690ebf791efab70c423f6f0a54764e84517

  • SSDEEP

    6144:A4ZarZZCejaDAXSyuQIwfN2MRL1nglZ3DESd26c5fAtOcyICSz4rhZ5i/:AQ+ZAejaDgEwQ0JnwAE8fAJ+SzwC

Score
8/10
collectionspywarestealer

Malware Config

Targets

    • Target

      Nord VPN Brute Checker By MTSoftCrack/Nord VPN Brute Checker.exe

    • Size

      365KB

    • MD5

      66371907bd2317b82e2f8e5aef1729e7

    • SHA1

      190e7ec2bb64d5f8f12552cab8e66c165bd537ac

    • SHA256

      854f6eda174f41f8c018ec4a01d0df8eae63d5200e1ee7581418f80474a2b570

    • SHA512

      d6bbaff9b998feed287eb0f8e15208de455c14eeff1c3a510acd0060abe1d651d448250edd9f0a8b1bff23616063ce704832ab88802821cd0361129ac32d6fea

    • SSDEEP

      6144:x0A/NP+WybUhuerzIF5ykg7Bi/n42vlHLNbOZ16/w8Y/2PrZyEg2yWRlNQ:xL/t+WFdlM/42vtxbOZ4BYutTNJi

    Score
    8/10
    collectionspywarestealer

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Email Collection

1
T1114

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks