General

  • Target

    341dab4037e9eff3fa0f34fb8382f30c.bin

  • Size

    460KB

  • Sample

    240313-bmcfvagd2v

  • MD5

    3baf028b4e099bcf5bbca47c7e8c94cd

  • SHA1

    823e426ff2febb5cd365cad014bbee6c4d1c3fd4

  • SHA256

    ca8a7d9d1cec584d9c5ea4a02a19270929ec2fdb8819a21d94f7b6adcb870092

  • SHA512

    da93b826ff7f281993ec89122f6c27e55a6914a5dc03628d18465709757daef7f8c2530a5fffd01e53bd45ff8a0de9c385eaca2e925bab1822f43d34e4a01768

  • SSDEEP

    12288:HDiZAxMJdJua/y1kEH6dqK/p75978xolKw:HD5ej/a0qm7fBlKw

Malware Config

Targets

    • Target

      665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe

    • Size

      551KB

    • MD5

      341dab4037e9eff3fa0f34fb8382f30c

    • SHA1

      9833559bcda07e6976364672f6b7c8bcef84571f

    • SHA256

      665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea

    • SHA512

      bd0d81ddde528f9987f749f9789d6a32300c7eef5d98593c4fc708d0352d0c8828982482894bd8ac9e768e320f4ba5fede2ecd8937a461dadad4015be2940f3d

    • SSDEEP

      6144:ImOP0pJkkuNjE241F13gyLWoz6XVasKvGSz7tvIPykUn5CRFaPyCoUtU7Hi8R55i:pkNE2cL3rKou+vGEZvx5CD1W4i83bWL

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Lokibot

      Lokibot is a Password and CryptoCoin Wallet Stealer.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      9625d5b1754bc4ff29281d415d27a0fd

    • SHA1

      80e85afc5cccd4c0a3775edbb90595a1a59f5ce0

    • SHA256

      c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448

    • SHA512

      dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b

    • SSDEEP

      192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks