Resubmissions

17/06/2024, 18:43

240617-xc4cgateql10

17/06/2024, 18:41

240617-xb5h5szbnb10

General

  • Target
    ShibaGT_Genesis_Cracked_V6.5.exe
  • Size 17.8MB
  • Sample240617-xc4cgateql
  • SHA256 f98b901ee7f72765c971ad03184c32617670a2a305ff4fa452f51b52f040b770
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      ShibaGT_Genesis_Cracked_V6.5.exe
    • Size 17.8MB
    • SHA256 f98b901ee7f72765c971ad03184c32617670a2a305ff4fa452f51b52f040b770
    • MD5 SHA1 SHA512 SSDEEP
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      main.pyc
    • Size 7KB
    • SHA256 2d3fb207bb0e938ed722c403b4956dcbfe33e9f6afdd7afef8ad07d22f9a312d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks