General

  • Target

    Setup_WinThruster_2024.exe.7z

  • Size

    6.7MB

  • Sample

    240404-mrzmqadc74

  • MD5

    c144df49ab30201742cc43ab60f1a2ed

  • SHA1

    0579840987c06f4e8bedaedec207ebde2d340fa2

  • SHA256

    9e22227422edc42d016c9adc77290c85c623b9deb8f33a6282557338bb93907b

  • SHA512

    82e154b35699229f7b10ebfb45edf249d16fef9eb284e3bb0db180659d45d36047afa38c08b2f10aac8a0a60761f4e45a581a11c11664d3dbb030a444a6a44c2

  • SSDEEP

    196608:jh2lkzbtuVLNqtO6UECfMIIUxgHMw/hOMm2Dg0hKeA:ycwVZonUE46HMwZbm2v

Malware Config

Targets

    • Target

      Setup_WinThruster_2024.exe

    • Size

      7.3MB

    • MD5

      62f9258f3ae4774f9dc169a2a0b1d68e

    • SHA1

      56164f50722724275c0db381235d3b793f85acd5

    • SHA256

      82f5a693742c6c35f1280dbc5a4148598c129208dfc0544a5cd457b7ac8e824a

    • SHA512

      ef04a48d957d646e0b4fbdb68bfe59bedfb6f5701dd9497b2bc5abeea57b5d7be5f8694ca59d535c8d14514ecacfb6773476abcd3d2f65a1da7c0c75241d7fd2

    • SSDEEP

      98304:cSi3CpUYtyBI5sdXR/YVTWXumt2Q7VJedSNtjrk8rNF3y0HWRR4cmWDjzK45:IClt4I+yTd2rJzrjr7H3r2R2qHb

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks