Resubmissions

01/05/2024, 17:15

240501-vshplaeb67 7

01/05/2024, 17:06

240501-vmhgmsea62 7

01/05/2024, 17:01

240501-vjj63abf9w 7

01/05/2024, 17:00

240501-vh914adh82 3

01/05/2024, 16:59

240501-vhhxlsdh69 7

General

  • Target

    AmongUs-Cheat.exe

  • Size

    16.1MB

  • Sample

    240501-vjj63abf9w

  • MD5

    a40bc37eff26c03a52f137813410b276

  • SHA1

    f0736be3bd4151705becbb75a2dfbdeb39eb64f3

  • SHA256

    2c94796c6ad4d1ed123194d787fa91f728d28a9ac5f455e59219ee097d49fdfa

  • SHA512

    d18a8407f47f7b7decfe46fe50b70844ea470976b1c92b8a134aae3764f9ec18931ffb7dbf9de7b5a1bdeff3bfac697336e23b366b19ff7807dd02b036d58234

  • SSDEEP

    393216:Ev90+5gDkTh2Jp5MwurEUWjsrz7E5PKk9buK+x:i9PvThidb8z7bkEK+

Malware Config

Targets

    • Target

      AmongUs-Cheat.exe

    • Size

      16.1MB

    • MD5

      a40bc37eff26c03a52f137813410b276

    • SHA1

      f0736be3bd4151705becbb75a2dfbdeb39eb64f3

    • SHA256

      2c94796c6ad4d1ed123194d787fa91f728d28a9ac5f455e59219ee097d49fdfa

    • SHA512

      d18a8407f47f7b7decfe46fe50b70844ea470976b1c92b8a134aae3764f9ec18931ffb7dbf9de7b5a1bdeff3bfac697336e23b366b19ff7807dd02b036d58234

    • SSDEEP

      393216:Ev90+5gDkTh2Jp5MwurEUWjsrz7E5PKk9buK+x:i9PvThidb8z7bkEK+

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      AmongUs-Cheat.pyc

    • Size

      69KB

    • MD5

      fb942aafb09f2c768e27fba5460ffcda

    • SHA1

      0f5ab31a93a66f7c9160e76fa2126027f89ed987

    • SHA256

      114f92f159dd6defdda66707812cb320102c7357595179f61507ef5d79f133d7

    • SHA512

      7c7b5d20b520ab6241ec2934547349947586abd5cc14ebf27e7cf4345856c4936aba246c26379c13ac9cc0f57a46320e3471bb7033fd2f8e608886019b30ca75

    • SSDEEP

      768:ufAIw3n7BMMM8v82TwIvmLRmbp3oXTx2VatZA7iUIgxyniAnjOynrX6D7Ln:uI3nlM9mFwxyIgxynvaMrM

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks