Resubmissions

23-04-2024 20:21

240423-y5gvlsbe2s 7

23-04-2024 20:18

240423-y3mcbabd8v 7

General

  • Target

    LawnMowerSim.exe

  • Size

    58.8MB

  • Sample

    240423-y5gvlsbe2s

  • MD5

    73e73b664c94f688c5892c9ccbb70653

  • SHA1

    7562db4ce3f048d5a9f132e6f7ccd95f896d1280

  • SHA256

    0c2490a4968275a4bb94afdfd385b04ce02b4165a9729842fa31ab9cb080f231

  • SHA512

    80f892c99b6f533a49476832bae810ddac79f0310f7f14962998a7b9e9efad69ca0f68a6aad0b151591b0e49f2b9d9dca856288c0540e1866ead66c324d6a032

  • SSDEEP

    1572864:cQ3iwANp72wpeeZZzg0TBkSLjBSo2qHWB75i2rz3p:cBwANp7y41T/LjBr2qHO5i2rz3

Malware Config

Targets

    • Target

      LawnMowerSim.exe

    • Size

      58.8MB

    • MD5

      73e73b664c94f688c5892c9ccbb70653

    • SHA1

      7562db4ce3f048d5a9f132e6f7ccd95f896d1280

    • SHA256

      0c2490a4968275a4bb94afdfd385b04ce02b4165a9729842fa31ab9cb080f231

    • SHA512

      80f892c99b6f533a49476832bae810ddac79f0310f7f14962998a7b9e9efad69ca0f68a6aad0b151591b0e49f2b9d9dca856288c0540e1866ead66c324d6a032

    • SSDEEP

      1572864:cQ3iwANp72wpeeZZzg0TBkSLjBSo2qHWB75i2rz3p:cBwANp7y41T/LjBr2qHO5i2rz3

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Collection

Data from Local System

1
T1005

Command and Control

Web Service

1
T1102

Tasks