General

  • Target

    5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94

  • Size

    80KB

  • Sample

    230608-m6wvdaef42

  • MD5

    02f630bd197a94ac24badae6c183756c

  • SHA1

    e635466d561d248f8048f5887f4c4d451b0f988f

  • SHA256

    5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94

  • SHA512

    72514182d61d5b5e878a95c79269c9988fe2bec21d3d32bc1a5d921370732bab1802d90fbcc5cde4f9e77da739eba40892dfcccc96aec8dbeab803c878d05fd0

  • SSDEEP

    1536:smO+7ax6fzbn1sTfA3oHpRivgg1XU8kp9bLY/xQwyL:prNfzbnl3oHpRCggqr9o/x5yL

Malware Config

Targets

    • Target

      5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94

    • Size

      80KB

    • MD5

      02f630bd197a94ac24badae6c183756c

    • SHA1

      e635466d561d248f8048f5887f4c4d451b0f988f

    • SHA256

      5922855fb22f461cc67e90ddd40091a0ea49595dc656d1acc938f23d42fd7a94

    • SHA512

      72514182d61d5b5e878a95c79269c9988fe2bec21d3d32bc1a5d921370732bab1802d90fbcc5cde4f9e77da739eba40892dfcccc96aec8dbeab803c878d05fd0

    • SSDEEP

      1536:smO+7ax6fzbn1sTfA3oHpRivgg1XU8kp9bLY/xQwyL:prNfzbnl3oHpRCggqr9o/x5yL

    • family_kraken

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks