General

  • Target

    93b4f08668d889ae15de8052ff91674a7ba3032520864.exe

  • Size

    3.0MB

  • Sample

    230214-tvs3nsef23

  • MD5

    9422fdf5908ef9676cd69664a3eeb758

  • SHA1

    fca31d6375653988370f72dfc96cfdad4ec93662

  • SHA256

    93b4f08668d889ae15de8052ff91674a7ba3032520864a08860a1c09210db4f5

  • SHA512

    5068f84ea94523bc189d66d104e53e53fa96d4ac2f797068e98f717ebef5bf33e405a5aa938d5b828089f9e0f53be337372ad6e35962732611818ce66df1acf2

  • SSDEEP

    49152:0DB3/EyMqY9pJKKMFC6oaisLFA842Lruk1s:q6q5FpLO84N

Score
10/10

Malware Config

Extracted

Family

aurora

C2

45.128.234.60:8081

Targets

    • Target

      93b4f08668d889ae15de8052ff91674a7ba3032520864.exe

    • Size

      3.0MB

    • MD5

      9422fdf5908ef9676cd69664a3eeb758

    • SHA1

      fca31d6375653988370f72dfc96cfdad4ec93662

    • SHA256

      93b4f08668d889ae15de8052ff91674a7ba3032520864a08860a1c09210db4f5

    • SHA512

      5068f84ea94523bc189d66d104e53e53fa96d4ac2f797068e98f717ebef5bf33e405a5aa938d5b828089f9e0f53be337372ad6e35962732611818ce66df1acf2

    • SSDEEP

      49152:0DB3/EyMqY9pJKKMFC6oaisLFA842Lruk1s:q6q5FpLO84N

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks