General

  • Target
    vault.exe
  • Size 17.8MB
  • Sample240619-m45phayfph
  • SHA256 b116e2c650cc3ff343a9ab05fdfed45ceabce42a4c07b6555bef30670502b181
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      vault.exe
    • Size 17.8MB
    • SHA256 b116e2c650cc3ff343a9ab05fdfed45ceabce42a4c07b6555bef30670502b181
    • MD5 SHA1 SHA512 SSDEEP
    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks