General

  • Target

    download.exe

  • Size

    64KB

  • Sample

    231013-qe7pcaaa3w

  • MD5

    9b2dffb5747aea1e6ccc4d2a7055bcf6

  • SHA1

    dcd11aecdcf33b57fbc5528ea8509b2f942df7e8

  • SHA256

    9de0c90a9ad1a1d2e8050513205b6eddf17bd22105d40779367d6789e82c9c30

  • SHA512

    26e4447a2f17069f850288e7b297010ec9caeccf72de971ab86fd81436a8c573ac69106b5d321597d0bf0c51b9618e54662917594f7c4b29e8e25d93412a8e2b

  • SSDEEP

    1536:fBymRmBOBI6RBTXBbBuB5BeBNz4bO9JZk+GRcX1vgzU2AY:fBxRmBOBI6RBTXBbBuB5BeBNpFvx6

Malware Config

Targets

    • Target

      download.exe

    • Size

      64KB

    • MD5

      9b2dffb5747aea1e6ccc4d2a7055bcf6

    • SHA1

      dcd11aecdcf33b57fbc5528ea8509b2f942df7e8

    • SHA256

      9de0c90a9ad1a1d2e8050513205b6eddf17bd22105d40779367d6789e82c9c30

    • SHA512

      26e4447a2f17069f850288e7b297010ec9caeccf72de971ab86fd81436a8c573ac69106b5d321597d0bf0c51b9618e54662917594f7c4b29e8e25d93412a8e2b

    • SSDEEP

      1536:fBymRmBOBI6RBTXBbBuB5BeBNz4bO9JZk+GRcX1vgzU2AY:fBxRmBOBI6RBTXBbBuB5BeBNpFvx6

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Email Collection

1
T1114

Tasks