General

  • Target

    file

  • Size

    1.2MB

  • Sample

    230921-mccveafd2y

  • MD5

    ec54b2ba8c27e8f7a283f4892b34493d

  • SHA1

    3d6ddcd18cc5b1e35de19ed20ef00525f6474fd6

  • SHA256

    00631c7d5c1cf87b29ca5ff28e3485e3ed63093487b6c506e32f5f8a6eaca61e

  • SHA512

    db72f1013a14b00ee05119266d15669cfe964ade0a140ff9a3cb561cacc43c4a1f9e4d5b1210153d4bb18852f8ff107452109f6de9aca05efbef5cf4f285738e

  • SSDEEP

    24576:ZOw3TtX4E708vSXDpz128E0jwtrUHarlPbijM66QFKjVHTSaaQDdnEsTGU:ZJIE48SbkhpbijM5QFKjVHTQQDdEsTGU

Malware Config

Targets

    • Target

      file

    • Size

      1.2MB

    • MD5

      ec54b2ba8c27e8f7a283f4892b34493d

    • SHA1

      3d6ddcd18cc5b1e35de19ed20ef00525f6474fd6

    • SHA256

      00631c7d5c1cf87b29ca5ff28e3485e3ed63093487b6c506e32f5f8a6eaca61e

    • SHA512

      db72f1013a14b00ee05119266d15669cfe964ade0a140ff9a3cb561cacc43c4a1f9e4d5b1210153d4bb18852f8ff107452109f6de9aca05efbef5cf4f285738e

    • SSDEEP

      24576:ZOw3TtX4E708vSXDpz128E0jwtrUHarlPbijM66QFKjVHTSaaQDdnEsTGU:ZJIE48SbkhpbijM5QFKjVHTQQDdEsTGU

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks