General

  • Target

    NEAS.NEASNEAS5b3a23e46741b8bf42575bf3c826476396629b890ad400a5d4d442cf336d0eb5exeexeexe_JC.exe

  • Size

    799KB

  • Sample

    231013-vbmxzsbh7s

  • MD5

    9858cc3c85ac5531c78baae8cc765b22

  • SHA1

    4c2d06a81ef520d76a3b01bf84bcc207ad746542

  • SHA256

    5b3a23e46741b8bf42575bf3c826476396629b890ad400a5d4d442cf336d0eb5

  • SHA512

    8d56bd94fd4d8f3b02d29d4b0b0a6970b7cf8562081c128c22d3ed89424d2e51892159c600d549d152d1e1a5c829f818d9f3310b895cf7a07d677c2630c823ff

  • SSDEEP

    12288:NwJvI7ow/WykB0YU1FEZL134yRZbZFWZHQjxcShVqambmpjfuwUXVY:mJsokYU70LF4IZ1FQH8cShoaomHUe

Score
7/10

Malware Config

Targets

    • Target

      NEAS.NEASNEAS5b3a23e46741b8bf42575bf3c826476396629b890ad400a5d4d442cf336d0eb5exeexeexe_JC.exe

    • Size

      799KB

    • MD5

      9858cc3c85ac5531c78baae8cc765b22

    • SHA1

      4c2d06a81ef520d76a3b01bf84bcc207ad746542

    • SHA256

      5b3a23e46741b8bf42575bf3c826476396629b890ad400a5d4d442cf336d0eb5

    • SHA512

      8d56bd94fd4d8f3b02d29d4b0b0a6970b7cf8562081c128c22d3ed89424d2e51892159c600d549d152d1e1a5c829f818d9f3310b895cf7a07d677c2630c823ff

    • SSDEEP

      12288:NwJvI7ow/WykB0YU1FEZL134yRZbZFWZHQjxcShVqambmpjfuwUXVY:mJsokYU70LF4IZ1FQH8cShoaomHUe

    Score
    7/10
    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks