General

  • Target

    sigmahacks0.2.exe

  • Size

    16.7MB

  • Sample

    240430-3de9xsac91

  • MD5

    dec028efade29b7af7d82843dee50f97

  • SHA1

    c3fe1ef22003329c9d48a4be4c6c8adeb59f7003

  • SHA256

    40a2289a95b1c4093abcd5bd56da54f12736aa14b1083d473f933cb8edab9d8d

  • SHA512

    5151db4af95200cfaced73684f754da366ce7bc1cdda6f2ccf3fe915d49e4004328da2183aad4ef1e833009044fb2dc8e109c04559536c629bc13e97149e2f4d

  • SSDEEP

    393216:ULQ8s4u1wW+eGQR79johBGcP6USpfOY5:MQ3R1wW+e5R79ME5OY5

Malware Config

Targets

    • Target

      sigmahacks0.2.exe

    • Size

      16.7MB

    • MD5

      dec028efade29b7af7d82843dee50f97

    • SHA1

      c3fe1ef22003329c9d48a4be4c6c8adeb59f7003

    • SHA256

      40a2289a95b1c4093abcd5bd56da54f12736aa14b1083d473f933cb8edab9d8d

    • SHA512

      5151db4af95200cfaced73684f754da366ce7bc1cdda6f2ccf3fe915d49e4004328da2183aad4ef1e833009044fb2dc8e109c04559536c629bc13e97149e2f4d

    • SSDEEP

      393216:ULQ8s4u1wW+eGQR79johBGcP6USpfOY5:MQ3R1wW+e5R79ME5OY5

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      kLXISTfbYJ.pyc

    • Size

      57KB

    • MD5

      053dc7d5b3067b2cf9e8b1878fcfc39b

    • SHA1

      966b034a17836a00a30bd41dde9595d4cf1e1c21

    • SHA256

      c90bc249d799c97cdb37cdca0cd9e1d5fa4347bcd851d8027ff3b7dbfd112984

    • SHA512

      87274fd921386b2e7e7dc47918ef66cdb0505c6351faf79a7f0557c285cb4f81a1a1a161903508c01633e76beb5094e39f2249bce1ab37059afda555b69409a3

    • SSDEEP

      768:CCyWqks1l/mja1fgFK2K+La+2LcGVdPNQ1tFA0JK5EIHs:flqks1l/ma1f8K2K+La+218nIHs

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks