General

  • Target

    ac42e0b58838aa45b45fd5ae75a5c336c7ac3fef709e46c9bbb1ba293c0ea700

  • Size

    1.1MB

  • Sample

    240411-b2j48sgh26

  • MD5

    493094c494ab932d291b58b60e6744c3

  • SHA1

    98fb02f220b89ac7ccf6cc230e7df68333d74709

  • SHA256

    ac42e0b58838aa45b45fd5ae75a5c336c7ac3fef709e46c9bbb1ba293c0ea700

  • SHA512

    6b7c8a6d2520374b39496e93cd51e94eba1c24dc58a6dfa1872bac7927a07bc315476e9d152566d369dea851aaf7123cc53e38806babe941b1b884658a48b12b

  • SSDEEP

    24576:JBK7eDi16Xh/5UUJ/MDYBr5RFAs6hVEH2Hx0G6QJX3EpnB+QEDrCB:PmeDi1YUnDY1FAswyGn0+Lvg

Malware Config

Targets

    • Target

      ac42e0b58838aa45b45fd5ae75a5c336c7ac3fef709e46c9bbb1ba293c0ea700

    • Size

      1.1MB

    • MD5

      493094c494ab932d291b58b60e6744c3

    • SHA1

      98fb02f220b89ac7ccf6cc230e7df68333d74709

    • SHA256

      ac42e0b58838aa45b45fd5ae75a5c336c7ac3fef709e46c9bbb1ba293c0ea700

    • SHA512

      6b7c8a6d2520374b39496e93cd51e94eba1c24dc58a6dfa1872bac7927a07bc315476e9d152566d369dea851aaf7123cc53e38806babe941b1b884658a48b12b

    • SSDEEP

      24576:JBK7eDi16Xh/5UUJ/MDYBr5RFAs6hVEH2Hx0G6QJX3EpnB+QEDrCB:PmeDi1YUnDY1FAswyGn0+Lvg

    • Detects executables containing possible sandbox analysis VM usernames

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.