General

  • Target

    1548224f8551dfc606b9df44c4925162.bin

  • Size

    13.9MB

  • Sample

    240604-bhk77afg91

  • MD5

    e245142a5865e3970a8d3e70ea7af103

  • SHA1

    13b720c10eeda936c92d66abe0db7253a2b0d799

  • SHA256

    2d57812bf77a72a44c6211a11f56650e5f77cafee6f4d2978da7d638b806f1e2

  • SHA512

    257872771c829e2ebae8b787eed896b7220ba96cab60ca0e97554d7dd6a207bd1f9e895d136ae951db7c178c5914088ac6d2443f829491e85f031f84e92f737f

  • SSDEEP

    393216:5FnShmDm9jMf6oZYGx+VEL0hXq9Qpxh6k12HJjDfonxsGxdpS:HnSh19Fa9IXqMXWH1Loxt5S

Malware Config

Targets

    • Target

      ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f.exe

    • Size

      14.2MB

    • MD5

      1548224f8551dfc606b9df44c4925162

    • SHA1

      dd0435cf225ef9c1335bd506d3d06dddadebc0fe

    • SHA256

      ede42de45a694db9039b3179614eb6a26e9c34cb1d660a3dc11177bcb17d3f3f

    • SHA512

      33c0dcb808be041bc24466d6e117a11f3f91f7fbd3a7951230ca03b0bb2d8c7f0310c3f000f4e0efca6d18a9fd298757515cb2be63c96d1a11f826c341058061

    • SSDEEP

      393216:sEkZgf8Xq1+TtIiFGvvB5IjWqn6eclz10yuq+d:sRbXq1QtIZX3ILn6eccyr+d

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks