Resubmissions

15/11/2023, 23:16

231115-289lksff7z 7

15/11/2023, 23:09

231115-25mmmsff6z 7

General

  • Target

    MariyelsBeta.rar

  • Size

    79.6MB

  • Sample

    231115-289lksff7z

  • MD5

    41caf493b226b5a1e2cba8a531c67f93

  • SHA1

    7fc4a638ac39f2566e85d38d8c4dd757bd2efbf9

  • SHA256

    803503b34aba0e065fd5550f1414bf49b66a754778374643c07fceffab2dd0fc

  • SHA512

    f2d728d833476de49ccd5d42473ba66849d9f14c975216d8f4b33fbbd8fa899738115f716832a90bf42a6612db037010ed7db02952a4dba5a282cf3b19ec340e

  • SSDEEP

    1572864:FBsKayucVxltibkSAwUOBOfoRS8eA3RsnxRoodKhBcTXO/Yw4pJn5M:FBBlhnfiXUOcfohl3nodKhSq/YVBi

Malware Config

Targets

    • Target

      MariyelsBeta/Mariyels.exe

    • Size

      69.9MB

    • MD5

      7be7ab39b8b2c204ed4df9d0cb881fff

    • SHA1

      a4c523c4ea333af5108098d920e0445fa802b364

    • SHA256

      2edde921715ee580d1a6b4bb13e2239e22c98b1da4df46d32155f1495c1d31a0

    • SHA512

      261caea1a9ca1c51fe212c0420bedcbf98ae9de95a1cc003e24f507d0df4897774770470acf720b3add1ad09f10d6da32a4be0cfc12aac863c5bdcf7b09f4933

    • SSDEEP

      1572864:Si5kJopba3yfYHl8zRQcTe/FEd67As/ph6QSoXUwNSyaGDjqS:S6pbaQYHO1QcTeOd60shNVXUwNba0uS

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks