General

  • Target

    Snake_v1.exe

  • Size

    63.6MB

  • Sample

    230715-gywxhsaa61

  • MD5

    ef820062c9b8307b1d8c5b474c4aae41

  • SHA1

    9d0d10bd67dd6352ca2813bfce58e8294c8c212f

  • SHA256

    812c1bc73253ea51ba829be98d7c1af22c52fe8308014eca7d0dd6940dd3608c

  • SHA512

    7b76870087fbe67e9b3ace44cf812b119da5504f6516e8dfe687f537178d4a5b4f1c2eed21da7c06da2d0e3f47af11791946a56e6addf361c46c4ea7dfd0cf68

  • SSDEEP

    1572864:3x5iEkpVggrNpk7ea+7eFE7Ten8/PkVYKZ0+yiAs7:3nMVHrNpk7e9JT28/PpUXUs7

Score
7/10

Malware Config

Targets

    • Target

      Snake_v1.exe

    • Size

      63.6MB

    • MD5

      ef820062c9b8307b1d8c5b474c4aae41

    • SHA1

      9d0d10bd67dd6352ca2813bfce58e8294c8c212f

    • SHA256

      812c1bc73253ea51ba829be98d7c1af22c52fe8308014eca7d0dd6940dd3608c

    • SHA512

      7b76870087fbe67e9b3ace44cf812b119da5504f6516e8dfe687f537178d4a5b4f1c2eed21da7c06da2d0e3f47af11791946a56e6addf361c46c4ea7dfd0cf68

    • SSDEEP

      1572864:3x5iEkpVggrNpk7ea+7eFE7Ten8/PkVYKZ0+yiAs7:3nMVHrNpk7e9JT28/PpUXUs7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Process Discovery

1
T1057

Collection

Data from Local System

1
T1005

Tasks