Resubmissions

28-04-2024 11:26

240428-nj9ndsef32 7

28-04-2024 11:24

240428-nh59kseg5v 7

General

  • Target

    Firefox Installer.exe

  • Size

    341KB

  • Sample

    240428-nh59kseg5v

  • MD5

    f7c806d876844c44ba00e8ac079f8539

  • SHA1

    0a34225d886a99e3995aef29e78e7db71029ebe5

  • SHA256

    93e4f5ffe36584caf5bd14ec2d1285a544b5ef9b45d495eb76f7dfc1a95f7000

  • SHA512

    67b0412a9ca37f755b86e7dd90c22e86e88eedcf36b575d7bcad009fe812b1af158fb058bb6a459e03d725e7b1c4debad2fff4bd5e0ee97b711d199b09ad7504

  • SSDEEP

    6144:HaVWdyzOxeA1DfdwX3MmIOUIktIYVeWPU2HN/KJnUamKnzMRL1MJIvoNzp:HMROxdDfOnMmXUIqRoWPxc/gRL1gIgN9

Score
7/10

Malware Config

Targets

    • Target

      Firefox Installer.exe

    • Size

      341KB

    • MD5

      f7c806d876844c44ba00e8ac079f8539

    • SHA1

      0a34225d886a99e3995aef29e78e7db71029ebe5

    • SHA256

      93e4f5ffe36584caf5bd14ec2d1285a544b5ef9b45d495eb76f7dfc1a95f7000

    • SHA512

      67b0412a9ca37f755b86e7dd90c22e86e88eedcf36b575d7bcad009fe812b1af158fb058bb6a459e03d725e7b1c4debad2fff4bd5e0ee97b711d199b09ad7504

    • SSDEEP

      6144:HaVWdyzOxeA1DfdwX3MmIOUIktIYVeWPU2HN/KJnUamKnzMRL1MJIvoNzp:HMROxdDfOnMmXUIqRoWPxc/gRL1gIgN9

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      out.upx

    • Size

      188KB

    • MD5

      2a779706848199e597315870c4b077d4

    • SHA1

      48c674022d55ddb45d741c9c901204471ac973c7

    • SHA256

      d010265be33ead064c15604dcf5e90bf9f0608585eb9a04171294941e14a95a2

    • SHA512

      b092be4b0276c4fdc95ffa9635ae7be9b7babb0d3aa99bf9b6e17b8d53fc3351b1e0934ffc19639da89e580f028c5e9c38a2e78f84a071ddb546e619cf41889c

    • SSDEEP

      3072:488bdXF8FtO5dyzEAKZ/hx7c3unn+b09CIWncYodntK+C7VieM3SFZNt9ckP:XsdXFryQfP7nn+b0AvncfdwX3MmIO

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks