General

  • Target

    99d3003cc577c3635bcbb883634037469b35c3b1a31109dc145600bb1e683d4b

  • Size

    145KB

  • Sample

    240314-ewzvaaac41

  • MD5

    922dea2c04ec79d24a7ecc3edb6b36c7

  • SHA1

    7b829bb5a8f4e4e503c16864330c17cb7996ee2b

  • SHA256

    99d3003cc577c3635bcbb883634037469b35c3b1a31109dc145600bb1e683d4b

  • SHA512

    165d7d50323bf441249c1046ac9cf9fd77700fd977fc682567b4b265c44254587f4a9d000ae87850e6db56f063bd541139554536ee3659586856e99ebd5e6bc2

  • SSDEEP

    1536:HzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDEpOFNPslzvMYFzdT1cg6bjtx0V:4qJogYkcSNm9V7DWOXezUMzdTixD3kT

Score
10/10

Malware Config

Targets

    • Target

      99d3003cc577c3635bcbb883634037469b35c3b1a31109dc145600bb1e683d4b

    • Size

      145KB

    • MD5

      922dea2c04ec79d24a7ecc3edb6b36c7

    • SHA1

      7b829bb5a8f4e4e503c16864330c17cb7996ee2b

    • SHA256

      99d3003cc577c3635bcbb883634037469b35c3b1a31109dc145600bb1e683d4b

    • SHA512

      165d7d50323bf441249c1046ac9cf9fd77700fd977fc682567b4b265c44254587f4a9d000ae87850e6db56f063bd541139554536ee3659586856e99ebd5e6bc2

    • SSDEEP

      1536:HzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDEpOFNPslzvMYFzdT1cg6bjtx0V:4qJogYkcSNm9V7DWOXezUMzdTixD3kT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops desktop.ini file(s)

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks