Resubmissions

01/04/2023, 21:20

230401-z6wktsec2t 7

01/04/2023, 21:06

230401-zx6dnscg45 7

01/04/2023, 21:02

230401-zvv5xscg36 7

General

  • Target

    Builder.exe

  • Size

    44.3MB

  • Sample

    230401-zvv5xscg36

  • MD5

    2b3ea74456bb2aaeddeb90438580e72a

  • SHA1

    817a0af8b544ce324dbc1d2635dc2a4a45a8d60f

  • SHA256

    861fb491a428bedf4581a2e22062cd6b0b483a9727c37cb97dd46ece47853f07

  • SHA512

    f82f53e6fc887c3d240189b82859091719d4918fc2cef9831ebb6c215e68e079cd7499e120509b1a40b50c93dd18cf78a2f98b66b172602fcd3f6eba3a68a6c0

  • SSDEEP

    786432:hx7blFrUB+WuAZrY6XGc8ZgvnzLmGg1bWJ:hRblBDWlJJlfvRgNWJ

Score
7/10

Malware Config

Targets

    • Target

      Builder.exe

    • Size

      44.3MB

    • MD5

      2b3ea74456bb2aaeddeb90438580e72a

    • SHA1

      817a0af8b544ce324dbc1d2635dc2a4a45a8d60f

    • SHA256

      861fb491a428bedf4581a2e22062cd6b0b483a9727c37cb97dd46ece47853f07

    • SHA512

      f82f53e6fc887c3d240189b82859091719d4918fc2cef9831ebb6c215e68e079cd7499e120509b1a40b50c93dd18cf78a2f98b66b172602fcd3f6eba3a68a6c0

    • SSDEEP

      786432:hx7blFrUB+WuAZrY6XGc8ZgvnzLmGg1bWJ:hRblBDWlJJlfvRgNWJ

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v6

Tasks