General

  • Target

    hitomi_downloader_GUI.zip

  • Size

    81.0MB

  • Sample

    230515-p9fnnsfe27

  • MD5

    b716d665101f4887d1604a6e1ce4bf8f

  • SHA1

    c1a30f87e4c7f4fca5e7748fbfc382f772655a36

  • SHA256

    bd58c5f6860ae1a627337bc3cbc20707e7e935013a5bc8946d7a7dd1f5100671

  • SHA512

    6ef2661d5251eb4c38a766e9acb139f6564fa4057e1feb93b9fc697c26d8b0b6152af706c5069288b1227c930224d132ffd1f1db7e915907d534d6ee3365ef53

  • SSDEEP

    1572864:vkVyeZIZdbw3eNo+1StioVcK7ofk24ScvKhjYV5ci44H2PVgGLGeWqPBMY:vkTIZdbwO187VSnhjwVWPVhCqJMY

Malware Config

Targets

    • Target

      hitomi_downloader_GUI.zip

    • Size

      81.0MB

    • MD5

      b716d665101f4887d1604a6e1ce4bf8f

    • SHA1

      c1a30f87e4c7f4fca5e7748fbfc382f772655a36

    • SHA256

      bd58c5f6860ae1a627337bc3cbc20707e7e935013a5bc8946d7a7dd1f5100671

    • SHA512

      6ef2661d5251eb4c38a766e9acb139f6564fa4057e1feb93b9fc697c26d8b0b6152af706c5069288b1227c930224d132ffd1f1db7e915907d534d6ee3365ef53

    • SSDEEP

      1572864:vkVyeZIZdbw3eNo+1StioVcK7ofk24ScvKhjYV5ci44H2PVgGLGeWqPBMY:vkTIZdbwO187VSnhjwVWPVhCqJMY

    Score
    1/10
    • Target

      Readme.txt

    • Size

      122KB

    • MD5

      7d4947a8733e62cbf8bbe7a9851419a7

    • SHA1

      cf28a006b544389bceb826e455d829393362850d

    • SHA256

      4582fb413ac97e6b5def7e2e5829ab8da75922c7e336a3525b2fb4d0d063a38e

    • SHA512

      652f3796c1bb7846035d319c815fb7746dfeb1c5ff2aa131227bd90266d9501d09a52d4d0c4b8e68b00b97a580b09193d0a503ab328b86f522a561c49b4aaa43

    • SSDEEP

      1536:qOawcjvu/Jn4WJQyTVSEAqWFKHtuSob7n7K/xHr/tRw2YsuWaNQW:0w4TISXk9Y7WaCW

    Score
    1/10
    • Target

      hitomi_downloader_GUI.exe

    • Size

      81.2MB

    • MD5

      b5c7075fd15316300e60ae78eb18cddd

    • SHA1

      ba89ef99288f0753fa27483c592b585f3f2d99f6

    • SHA256

      0cd3546b2666c1c8dc2c41bb1b781396aaa169f2951d08369c61265b44a7c6dd

    • SHA512

      09331f2d4af6d710ff478bf6ab5812dab9d5f9ac55838012c63a5ef537699f845b06a25fe5cf886edd8ce6039059de952b6395ab795b249022877407ba009924

    • SSDEEP

      1572864:EA3LC/0DLw3I3gpewP87w8P46jg3KsUwGVUrj6r5eSKCvGHLKW3cek4hv:EAO0DLw3IwHSjvwbrj6DOHLjm4N

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks