Resubmissions

22-05-2023 08:09

230522-j15zbahf9x 7

08-05-2023 11:01

230508-m4jf9sac65 7

General

  • Target

    verybigchimpanzee.exe

  • Size

    344KB

  • Sample

    230508-m4jf9sac65

  • MD5

    aec814bf30dd191b641feef457a718ce

  • SHA1

    96c2bea5b416d10a2dae60acd2b7f9c7cebb8115

  • SHA256

    446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89

  • SHA512

    fdd89bcb64728e88e5b9453f3c93c011fa2f22a5947a3d380ac2768184126c27b0e97556ace1d736cfe4da20281b5c710af78f55460948d5561c979021f5b6b0

  • SSDEEP

    6144:SXRrO+JguvyIs1DkhmgPZw6JXAL5+9bbYZQ4:ir/9m3cYZQ

Malware Config

Targets

    • Target

      verybigchimpanzee.exe

    • Size

      344KB

    • MD5

      aec814bf30dd191b641feef457a718ce

    • SHA1

      96c2bea5b416d10a2dae60acd2b7f9c7cebb8115

    • SHA256

      446278b00e672276ebd77b7a20356f9fdad4aeb0add39d714de87f3c6b17af89

    • SHA512

      fdd89bcb64728e88e5b9453f3c93c011fa2f22a5947a3d380ac2768184126c27b0e97556ace1d736cfe4da20281b5c710af78f55460948d5561c979021f5b6b0

    • SSDEEP

      6144:SXRrO+JguvyIs1DkhmgPZw6JXAL5+9bbYZQ4:ir/9m3cYZQ

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks