General

  • Target

    build.exe

  • Size

    1.6MB

  • Sample

    230520-saffeafe4t

  • MD5

    e8f26ecf5db066b87474e865b0de3cdc

  • SHA1

    80ec10fd56cacf66108b3280868c00078dea3c80

  • SHA256

    d2e4fa8ee4bf5be0fdef19c2445021b18046c9b47e9223b2ab5d750018e1bf03

  • SHA512

    14a014948e03b65018a28ebe0269b95111e41b606c95abba1fdc0a7a4fcadb18144e198d4a2365a618c11d9d2b7b88ab0c4fc57c58ee71f0ccbaeefe847a17dd

  • SSDEEP

    24576:L7i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLDi:6Tq24GjdGSiqkqXfd+/9AqYanieKd

Score
10/10

Malware Config

Targets

    • Target

      build.exe

    • Size

      1.6MB

    • MD5

      e8f26ecf5db066b87474e865b0de3cdc

    • SHA1

      80ec10fd56cacf66108b3280868c00078dea3c80

    • SHA256

      d2e4fa8ee4bf5be0fdef19c2445021b18046c9b47e9223b2ab5d750018e1bf03

    • SHA512

      14a014948e03b65018a28ebe0269b95111e41b606c95abba1fdc0a7a4fcadb18144e198d4a2365a618c11d9d2b7b88ab0c4fc57c58ee71f0ccbaeefe847a17dd

    • SSDEEP

      24576:L7i2Q9NXw2/wPOjdGxY2rqkqjVnlqud+/2P+A+ZecdyFoBkkAnexMrdgLDi:6Tq24GjdGSiqkqXfd+/9AqYanieKd

    Score
    10/10
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks