General

  • Target

    FreeSoundRecorder.exe

  • Size

    8.0MB

  • Sample

    240610-yrr4esyclf

  • MD5

    2103c9a6cbfce9671a23eb9dc0685845

  • SHA1

    ae77add32a82c0a2de661eb065f9ac67de4be803

  • SHA256

    8b15571ef04e181c87d9706aa68db28170dd9bfdb514df3a549194575abb26c3

  • SHA512

    da68a1772830f4e05409538c847011e264f7a323314d9c93f199282d729005846a11045844b768b43a79ae93fc81670e31ae83d9998c8c03ce7fa011b4f53f3a

  • SSDEEP

    196608:nYoZRFuPAKbQy1bRcwIekW8bzWIIv5srshZawtymdMyeMOoOGSSf1:nBRFuFMU+e98eIIv5M5yymdMyezSf1

Malware Config

Targets

    • Target

      FreeSoundRecorder.exe

    • Size

      8.0MB

    • MD5

      2103c9a6cbfce9671a23eb9dc0685845

    • SHA1

      ae77add32a82c0a2de661eb065f9ac67de4be803

    • SHA256

      8b15571ef04e181c87d9706aa68db28170dd9bfdb514df3a549194575abb26c3

    • SHA512

      da68a1772830f4e05409538c847011e264f7a323314d9c93f199282d729005846a11045844b768b43a79ae93fc81670e31ae83d9998c8c03ce7fa011b4f53f3a

    • SSDEEP

      196608:nYoZRFuPAKbQy1bRcwIekW8bzWIIv5srshZawtymdMyeMOoOGSSf1:nBRFuFMU+e98eIIv5M5yymdMyezSf1

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks