Overview

overview

8

Static

static

1

CurseForge...er.exe

windows10-2004-x64

8

Resubmissions

13/06/2023, 15:30

230613-sxrf7ahc7y 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CurseForge Windows - Installer.exe

  • Size

    2.0MB

  • Sample

    230613-sxrf7ahc7y

  • MD5

    165679e68cb4426b58aeeb833e346614

  • SHA1

    c48670aeed67584b7f64de3563edd8c3f7404e5a

  • SHA256

    b9de87c8bd0efcc03531260deb5f64bd580281249ef9496507e22e43aea115d0

  • SHA512

    1fc3c05ef36647e1c6a65419c86507064db96c1dfcb5384a23218d12a616e803875667aa68bc4be7000c86fdf094e92691cb9d7199db37fce331227927ea9d25

  • SSDEEP

    49152:5h07xE87vxpsrFpIvgV7Rlh4TrAzPY/sZYQjLRUc:5h01PN+TIvWOyw/dMC

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      CurseForge Windows - Installer.exe

    • Size

      2.0MB

    • MD5

      165679e68cb4426b58aeeb833e346614

    • SHA1

      c48670aeed67584b7f64de3563edd8c3f7404e5a

    • SHA256

      b9de87c8bd0efcc03531260deb5f64bd580281249ef9496507e22e43aea115d0

    • SHA512

      1fc3c05ef36647e1c6a65419c86507064db96c1dfcb5384a23218d12a616e803875667aa68bc4be7000c86fdf094e92691cb9d7199db37fce331227927ea9d25

    • SSDEEP

      49152:5h07xE87vxpsrFpIvgV7Rlh4TrAzPY/sZYQjLRUc:5h01PN+TIvWOyw/dMC

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks