General

  • Target

    171820386548cbbea4ed1903ede58ab5c6cfb71df0faa52822ed84c4f21b423dbf37ee3c0d777.dat-decoded.exe

  • Size

    39KB

  • Sample

    240612-r8p7tssgmm

  • MD5

    c3ee4808bbbf0cfca2c62dd963a4e17f

  • SHA1

    64c37a40c6f303941cb9c0d834d77b69b1f6a247

  • SHA256

    20d897e148b9c2b179f124e208f37a8c9e2cd89aa208ae0a1ef067fae9b9398e

  • SHA512

    628e904a5346b976802ccbe8a09e930d17df3887bb30c6676e28bd1bae0f8ae4402f0097e277af538c5447f173c09453f5943b2f965f99b892e60737f0ed5383

  • SSDEEP

    768:t5WvcBpe75PDk/ySQOyxNl4BPhujM7KGSk28SvOsomKeI/wdtCYh:60BpeNgdQlaBPhujM7KGSk286omKekET

Malware Config

Targets

    • Target

      171820386548cbbea4ed1903ede58ab5c6cfb71df0faa52822ed84c4f21b423dbf37ee3c0d777.dat-decoded.exe

    • Size

      39KB

    • MD5

      c3ee4808bbbf0cfca2c62dd963a4e17f

    • SHA1

      64c37a40c6f303941cb9c0d834d77b69b1f6a247

    • SHA256

      20d897e148b9c2b179f124e208f37a8c9e2cd89aa208ae0a1ef067fae9b9398e

    • SHA512

      628e904a5346b976802ccbe8a09e930d17df3887bb30c6676e28bd1bae0f8ae4402f0097e277af538c5447f173c09453f5943b2f965f99b892e60737f0ed5383

    • SSDEEP

      768:t5WvcBpe75PDk/ySQOyxNl4BPhujM7KGSk28SvOsomKeI/wdtCYh:60BpeNgdQlaBPhujM7KGSk286omKekET

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks