General

  • Target

    7081fae18e3528e406093b74560fc7ed

  • Size

    55KB

  • Sample

    240123-zeyk4shfg6

  • MD5

    7081fae18e3528e406093b74560fc7ed

  • SHA1

    06cd0b961fb10cb9aa7b3e68c690f3f6cb7f9176

  • SHA256

    05fb44dec07a750ce73009771a600a2b90ba59f1a9c5d50a064eb6aba9fecbb5

  • SHA512

    530ea39a0016f7d7ca03f92b3a10c4af6150da1748805b853b42a121c8e0216755fe8b91fb50ab77466e6411aed006746223531b7823b844fa4ed0ffd8b080ff

  • SSDEEP

    1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ24:NsDF64VJ5q0G

Malware Config

Targets

    • Target

      7081fae18e3528e406093b74560fc7ed

    • Size

      55KB

    • MD5

      7081fae18e3528e406093b74560fc7ed

    • SHA1

      06cd0b961fb10cb9aa7b3e68c690f3f6cb7f9176

    • SHA256

      05fb44dec07a750ce73009771a600a2b90ba59f1a9c5d50a064eb6aba9fecbb5

    • SHA512

      530ea39a0016f7d7ca03f92b3a10c4af6150da1748805b853b42a121c8e0216755fe8b91fb50ab77466e6411aed006746223531b7823b844fa4ed0ffd8b080ff

    • SSDEEP

      1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3NVNFcRbsENDYEQ24:NsDF64VJ5q0G

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks