General

  • Target

    Mauqes_beta.exe

  • Size

    72.2MB

  • Sample

    240222-xewemsec84

  • MD5

    6be6188a62bc00884b4ccc1221281fbf

  • SHA1

    288a898a493d043d8e9755c74c0356c103665091

  • SHA256

    35f671ea54afd102bbd3df46a352d23df13db5b414289b02d5bbc1218fc6d9e4

  • SHA512

    69bfcd160e626b0f0d9cdfd603e3a66ee5a21f0c8315740d279999be13652b26f0e8990a42a907404b42774b95d81a80bedfe46dcbf9cafc1966b74434ac8c20

  • SSDEEP

    1572864:ZejOS3uvjpTF5/zgtW9o3ZuXgGUTMwRQVRxtylCO1Hsh+kpvp0k:Z9r1F580e3EX1eMjVRm91Hi3pyk

Score
10/10

Malware Config

Targets

    • Target

      Mauqes_beta.exe

    • Size

      72.2MB

    • MD5

      6be6188a62bc00884b4ccc1221281fbf

    • SHA1

      288a898a493d043d8e9755c74c0356c103665091

    • SHA256

      35f671ea54afd102bbd3df46a352d23df13db5b414289b02d5bbc1218fc6d9e4

    • SHA512

      69bfcd160e626b0f0d9cdfd603e3a66ee5a21f0c8315740d279999be13652b26f0e8990a42a907404b42774b95d81a80bedfe46dcbf9cafc1966b74434ac8c20

    • SSDEEP

      1572864:ZejOS3uvjpTF5/zgtW9o3ZuXgGUTMwRQVRxtylCO1Hsh+kpvp0k:Z9r1F580e3EX1eMjVRm91Hi3pyk

    Score
    10/10
    • Epsilon Stealer

      Information stealer.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks