General

  • Target

    ts.exe.2

  • Size

    34KB

  • Sample

    231010-1vwbcsga36

  • MD5

    16f2a3898cdc27798158c9bf35a4eff4

  • SHA1

    0f88dcf42404a502e2d6f010691f73e0fe3d211b

  • SHA256

    9eddde26e17a6478d77a61a99cb0cba490498d7d545c7d541120e0d52deb2452

  • SHA512

    c00626113f1a094a359511f3d6301d6591deabcabffe7ab3449853626b3ebf6c7512465ba95d3297c935203e0e99739406c392ea1012498c8cb644431e582686

  • SSDEEP

    768:hbOs+EjBO4cl767rI2jUzxoHEQLfp+Zc+wRrl6eUzyjbFCHy5b7I2lSVRR9wggRa:1Os+EDVLf9VRo7gRemy83

Malware Config

Extracted

Family

statusrecorder

C2

185.106.94.73

Targets

    • Target

      ts.exe.2

    • Size

      34KB

    • MD5

      16f2a3898cdc27798158c9bf35a4eff4

    • SHA1

      0f88dcf42404a502e2d6f010691f73e0fe3d211b

    • SHA256

      9eddde26e17a6478d77a61a99cb0cba490498d7d545c7d541120e0d52deb2452

    • SHA512

      c00626113f1a094a359511f3d6301d6591deabcabffe7ab3449853626b3ebf6c7512465ba95d3297c935203e0e99739406c392ea1012498c8cb644431e582686

    • SSDEEP

      768:hbOs+EjBO4cl767rI2jUzxoHEQLfp+Zc+wRrl6eUzyjbFCHy5b7I2lSVRR9wggRa:1Os+EDVLf9VRo7gRemy83

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks