General
-
Target
abb15cf452f69c7ee29db928805889e610945224e4948354df911db7955e04b8
-
Size
672KB
-
Sample
240327-28lvhsdb56
-
MD5
bce9c014ccd52bed41a84c6a7fca4987
-
SHA1
20811da08eccd560bbc5cce4b48814f4718a1e76
-
SHA256
abb15cf452f69c7ee29db928805889e610945224e4948354df911db7955e04b8
-
SHA512
31647907223bd5c1f27c0853e51b0c4c2c42dd044e63cb5efd2d5b87cf7183566111007eeb9a3711b1ccf7f5ba7a90aa661d76947606f14175d13d4d4761c253
-
SSDEEP
12288:lXa8shA4qgJtLNfyoNHGwA6XFEPQi+4OyUrLR0C:lq86qucoNHc6sZ7tCmC
Malware Config
Targets
-
-
Target
abb15cf452f69c7ee29db928805889e610945224e4948354df911db7955e04b8
-
Size
672KB
-
MD5
bce9c014ccd52bed41a84c6a7fca4987
-
SHA1
20811da08eccd560bbc5cce4b48814f4718a1e76
-
SHA256
abb15cf452f69c7ee29db928805889e610945224e4948354df911db7955e04b8
-
SHA512
31647907223bd5c1f27c0853e51b0c4c2c42dd044e63cb5efd2d5b87cf7183566111007eeb9a3711b1ccf7f5ba7a90aa661d76947606f14175d13d4d4761c253
-
SSDEEP
12288:lXa8shA4qgJtLNfyoNHGwA6XFEPQi+4OyUrLR0C:lq86qucoNHc6sZ7tCmC
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-