Overview

overview

10

Static

static

10

setup.exe

windows7-x64

7

setup.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Install.zip
  • Size 42.1MB
  • Sample230122-w2xesaaf6t
  • SHA256 75788824df064d8df0740838602a5ba062ca19785eb99ae392fa569915e5a17e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
auroralinkpdfspywarestealer

Malware Config

Extracted

Family

  • aurora

C2

  • 82.115.223.138:8081

Targets

    • Target
      setup.exe
    • Size 4.5MB
    • SHA256 de9fd5ca8ae340af73e960add6c2e2bd28ae5fdb8af61cdf6665c66326f011a3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks