General

  • Target

    d9271dc744e8a04bb8551c04b4b554d474b14ac2d8f2ea37e6df80193f3c96f6

  • Size

    1.5MB

  • Sample

    240608-ppg11abf5z

  • MD5

    7ab00d11cb863510389e701485231d54

  • SHA1

    1cf5fe458a60b10b198a28809d1e2e3cda2d1464

  • SHA256

    d9271dc744e8a04bb8551c04b4b554d474b14ac2d8f2ea37e6df80193f3c96f6

  • SHA512

    127e1353a73728c3d9f8bb9955b1118452a37fbfa638bf8fbfe739151ad5ee1928609e09ad804e53ff62e4ae3fd2f14e389960f14ef79f61e3813cee6752b2ee

  • SSDEEP

    12288:E23Jh2IPCcnWZ9bv8XMFSkLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVd:E2LnQvkd7NyBo4kx929bL3Hnx

Score
7/10

Malware Config

Targets

    • Target

      d9271dc744e8a04bb8551c04b4b554d474b14ac2d8f2ea37e6df80193f3c96f6

    • Size

      1.5MB

    • MD5

      7ab00d11cb863510389e701485231d54

    • SHA1

      1cf5fe458a60b10b198a28809d1e2e3cda2d1464

    • SHA256

      d9271dc744e8a04bb8551c04b4b554d474b14ac2d8f2ea37e6df80193f3c96f6

    • SHA512

      127e1353a73728c3d9f8bb9955b1118452a37fbfa638bf8fbfe739151ad5ee1928609e09ad804e53ff62e4ae3fd2f14e389960f14ef79f61e3813cee6752b2ee

    • SSDEEP

      12288:E23Jh2IPCcnWZ9bv8XMFSkLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVd:E2LnQvkd7NyBo4kx929bL3Hnx

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks