General

  • Target

    1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882

  • Size

    2.8MB

  • Sample

    240512-xd6tzsdg84

  • MD5

    ae13c23cad4370cdaaaa690a8a7e3c14

  • SHA1

    5e2b3b31bdfce478d7a6d3ad681d84b40c911a9c

  • SHA256

    1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882

  • SHA512

    ddbb0bd84ec98a451e2d4b214826dc94a8ceb00b2daa7f54d27d837b439d662be0ab691a022b5e1f911a583a3be6dd2dd1271f94068b5932e55f7e041b4ecdc9

  • SSDEEP

    49152:Ls8YbWXeSziEMyLqwCvOvlRO5VK1wTeJxx:IB2lROPKWTeH

Malware Config

Targets

    • Target

      1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882

    • Size

      2.8MB

    • MD5

      ae13c23cad4370cdaaaa690a8a7e3c14

    • SHA1

      5e2b3b31bdfce478d7a6d3ad681d84b40c911a9c

    • SHA256

      1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882

    • SHA512

      ddbb0bd84ec98a451e2d4b214826dc94a8ceb00b2daa7f54d27d837b439d662be0ab691a022b5e1f911a583a3be6dd2dd1271f94068b5932e55f7e041b4ecdc9

    • SSDEEP

      49152:Ls8YbWXeSziEMyLqwCvOvlRO5VK1wTeJxx:IB2lROPKWTeH

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks