General

  • Target

    InvictaStealer.exe

  • Size

    2.2MB

  • Sample

    230610-ekjc6aeb64

  • MD5

    986a9cd4347aa2207ae5fdbffecfae5a

  • SHA1

    541b1fc771d28fa4605605afe5e5bfa019043fee

  • SHA256

    f74146e200ac3983f6df782faa0d0807c22bfc9c2ae69ec1df6f9df439c65f5c

  • SHA512

    7cabb9e108247b40387d9e10bfd3380c6d8f1ad0e8e1728b7166a29b99449ff59eb01f5766a62daf94ca86508eaa9a831dde947f168e8b116b698fb7f523b800

  • SSDEEP

    24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtR:PBozBdhEV7q8bOQnIFWY+3Je0w5

Malware Config

Targets

    • Target

      InvictaStealer.exe

    • Size

      2.2MB

    • MD5

      986a9cd4347aa2207ae5fdbffecfae5a

    • SHA1

      541b1fc771d28fa4605605afe5e5bfa019043fee

    • SHA256

      f74146e200ac3983f6df782faa0d0807c22bfc9c2ae69ec1df6f9df439c65f5c

    • SHA512

      7cabb9e108247b40387d9e10bfd3380c6d8f1ad0e8e1728b7166a29b99449ff59eb01f5766a62daf94ca86508eaa9a831dde947f168e8b116b698fb7f523b800

    • SSDEEP

      24576:OOfsfKozBKHAhRh3KzPSA7R7Bt28SVSVlzyQOQZ9IEb68vL4R+2pYJeCYMXABtR:PBozBdhEV7q8bOQnIFWY+3Je0w5

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks