General

  • Target

    build.exe

  • Size

    87KB

  • Sample

    230614-n36qvagc82

  • MD5

    6dbc78e7f56e4d05dbf61e3f205b339d

  • SHA1

    e255fc4314b98064497406940c36c77755c1627a

  • SHA256

    f0f06d6d0f3bbcafb30dd9fd31bf75974e8f19fbb1f226ecada15720496da9ef

  • SHA512

    10fe0204e16c61ab91f6b183de3beb4a5f8d701b62c41d18acd326cf6e21831ed538472ea5137da775b9fa7210238dd9ab0d6aed8f12ad39806a5f832bf4cd2c

  • SSDEEP

    1536:7e1Qda8UdmdDUfOWnU18NMS40RJ85h2BCbzaer9baRInopjXXT1y9Wp31+qbR:QQCdmdDUfOWnU18NMS4iJk2gN9baRao5

Malware Config

Targets

    • Target

      build.exe

    • Size

      87KB

    • MD5

      6dbc78e7f56e4d05dbf61e3f205b339d

    • SHA1

      e255fc4314b98064497406940c36c77755c1627a

    • SHA256

      f0f06d6d0f3bbcafb30dd9fd31bf75974e8f19fbb1f226ecada15720496da9ef

    • SHA512

      10fe0204e16c61ab91f6b183de3beb4a5f8d701b62c41d18acd326cf6e21831ed538472ea5137da775b9fa7210238dd9ab0d6aed8f12ad39806a5f832bf4cd2c

    • SSDEEP

      1536:7e1Qda8UdmdDUfOWnU18NMS40RJ85h2BCbzaer9baRInopjXXT1y9Wp31+qbR:QQCdmdDUfOWnU18NMS4iJk2gN9baRao5

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks