General

  • Target

    Onetap-v4-crack.exe

  • Size

    14.2MB

  • Sample

    240510-pce1wadd9t

  • MD5

    361fe4d6ec526cba30dcb2f6185fe8c5

  • SHA1

    145d91dda78a4a844e3795d1d7ccee707a34e321

  • SHA256

    284c6f8e0db7d8e62f8dbc0db524523fe90bfd17807ed02d3f6b87084671551c

  • SHA512

    669c296752b1b2323208d11c607a30d640ce3d5f6bbb64e457fc10773ea81d0dcac14676b29860a4e2f781486ce1fe368e5a68e93088d68966a53331c7c3f6a3

  • SSDEEP

    196608:yFT4DPLx5nT7Qa19dusb5/cPXrXkQl4jFAl6c4dbkXkv1Rlv7oftPThdgSY6v5wu:yOHxJT7Q4lRzZFoEAXkN/oFPzgL6G58

Malware Config

Targets

    • Target

      Onetap-v4-crack.exe

    • Size

      14.2MB

    • MD5

      361fe4d6ec526cba30dcb2f6185fe8c5

    • SHA1

      145d91dda78a4a844e3795d1d7ccee707a34e321

    • SHA256

      284c6f8e0db7d8e62f8dbc0db524523fe90bfd17807ed02d3f6b87084671551c

    • SHA512

      669c296752b1b2323208d11c607a30d640ce3d5f6bbb64e457fc10773ea81d0dcac14676b29860a4e2f781486ce1fe368e5a68e93088d68966a53331c7c3f6a3

    • SSDEEP

      196608:yFT4DPLx5nT7Qa19dusb5/cPXrXkQl4jFAl6c4dbkXkv1Rlv7oftPThdgSY6v5wu:yOHxJT7Q4lRzZFoEAXkN/oFPzgL6G58

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks