General

  • Target

    tmp

  • Size

    3.1MB

  • Sample

    230327-vgpc1agd9t

  • MD5

    027a60b4337dd0847d0414aa8719ffec

  • SHA1

    80f78f880e891adfa8f71fb1447ed19734077062

  • SHA256

    3dbde13894aa65f33217ab351dd3f5c4fb54d570b3371fef1505a7370aab4168

  • SHA512

    009703b2c57258ccec76aa97807976e3ad693f3ff90b5417ae920e5860354bdaf4b01caaa850f1996391da5b6d75ebc38509a9b124fd9ae0660d7002b54b606d

  • SSDEEP

    49152:ZRxujKxS2EuSIYkgSc71bdf5k6N21D5MwICiaiSLE6k1/lRr:ZRM282P2jScBbS2lRr

Score
10/10

Malware Config

Extracted

Family

aurora

C2

212.87.204.93:8081

Targets

    • Target

      tmp

    • Size

      3.1MB

    • MD5

      027a60b4337dd0847d0414aa8719ffec

    • SHA1

      80f78f880e891adfa8f71fb1447ed19734077062

    • SHA256

      3dbde13894aa65f33217ab351dd3f5c4fb54d570b3371fef1505a7370aab4168

    • SHA512

      009703b2c57258ccec76aa97807976e3ad693f3ff90b5417ae920e5860354bdaf4b01caaa850f1996391da5b6d75ebc38509a9b124fd9ae0660d7002b54b606d

    • SSDEEP

      49152:ZRxujKxS2EuSIYkgSc71bdf5k6N21D5MwICiaiSLE6k1/lRr:ZRM282P2jScBbS2lRr

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

2
T1081

Discovery

System Information Discovery

1
T1082

Collection

Data from Local System

2
T1005

Tasks