General
-
Target
6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421.zip
-
Size
4.2MB
-
Sample
240409-qx1czsbf71
-
MD5
7e32e5302b4bb8c73acad0f9d1733e40
-
SHA1
c8f0463bf13e431c5801785abd8beeaa04bd3b78
-
SHA256
7cd975ad9527659ded0174215814798afbbe615dfe5012b9def89e9d9f2bcbd5
-
SHA512
2b23382528848828872322d988fa6210ab02e8c970f61e608da0682fe11d85665a78852cdedf058242d4d5883bd467d864ba81e854baabfbff1f221ddda3a2f6
-
SSDEEP
98304:32X95deLTqs4NowML3II7nsSOAzgrq5O62Aq1muFww8:3o9X8qsSgMInZOAzgrqs6M0Nr
Malware Config
Targets
-
-
Target
6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421.exe
-
Size
4.5MB
-
MD5
20ed8b8eb556fa3cbc88b83882a6f1b0
-
SHA1
cd7ce6fc0068b6ef9c37d5dafec1319a39b88709
-
SHA256
6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421
-
SHA512
868b859bdff27e41f63b527590214ad22dcaf332bb3d5c7daafd295ea648d71d5bd6d01fee29587eee8b7d4ef01384089eb0b2408f3d2e048021701c357e3b9b
-
SSDEEP
98304:in1GhDYSAEbWAtdt7Eea0+JJHOBMT6yCltq5CFvxWof8e45D4UO38cYd5:0gYfux7EF0CHqI6Xg5CFvxW2Pe
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-