Resubmissions

13-04-2023 20:06

230413-yvl2ksfc2x 7

30-03-2023 20:39

230330-ze9clsff41 7

30-03-2023 19:15

230330-xyjvysdh87 7

30-03-2023 16:33

230330-t2w3xadd78 7

General

  • Target

    222.exe

  • Size

    518KB

  • Sample

    230330-xyjvysdh87

  • MD5

    084f0d74d04cbec4287b39b7a2d0b89f

  • SHA1

    c0e1d08d945d20b0c2c0d47caee2bf4dcba8760d

  • SHA256

    a0460d3bedbdd6aa525aa62d9161739f70f35b82b7878ae8923c60e701cb691f

  • SHA512

    1967acff5eb391b545a7f3b6d3679a4ee4ab68fa5acc8b1defb70ad8e3e610c044447538e9476703b6367507e6efe78d17ad59261d64a0791d7ac33ee8fb41a5

  • SSDEEP

    12288:1NTHHJMuyeMHrc3Hk06r1ChLNF3EjtgLujUi5h9StzZjP1ht6WyYztzj:/HmupOoUrylEjtsuo4h9GZ7o58pj

Score
7/10

Malware Config

Targets

    • Target

      222.exe

    • Size

      518KB

    • MD5

      084f0d74d04cbec4287b39b7a2d0b89f

    • SHA1

      c0e1d08d945d20b0c2c0d47caee2bf4dcba8760d

    • SHA256

      a0460d3bedbdd6aa525aa62d9161739f70f35b82b7878ae8923c60e701cb691f

    • SHA512

      1967acff5eb391b545a7f3b6d3679a4ee4ab68fa5acc8b1defb70ad8e3e610c044447538e9476703b6367507e6efe78d17ad59261d64a0791d7ac33ee8fb41a5

    • SSDEEP

      12288:1NTHHJMuyeMHrc3Hk06r1ChLNF3EjtgLujUi5h9StzZjP1ht6WyYztzj:/HmupOoUrylEjtsuo4h9GZ7o58pj

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Collection

Data from Local System

1
T1005

Tasks