Overview

overview

10

Static

static

3

0608a7559f...65.exe

windows7-x64

10

0608a7559f...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f4f5c57433724a32b7498b6a2c91bf0.bin

  • Size

    10.7MB

  • Sample

    240622-dd4vvavapb

  • MD5

    af5195d9efce403b39377d57fa6689f4

  • SHA1

    5fafa51d247980dd75b42f9e19a86bed9bc8fa08

  • SHA256

    4cd19bae49f0486628012e4352953312059d0e8d958080a5cffa5212df2d8848

  • SHA512

    9ff0111e606712906686a5a71e0eae45b2a6bd12db9ca2e8d2ccdefa6ce4deff4900fb8b20c4bb44897691894d9e9dcf8c4b338e977eca3e3a43db9c07b54144

  • SSDEEP

    196608:5qKBXnLQ6TLiyfHOjDNdiK+bltJX1doq4n2VQOdHdp9KbZEiiBX+c:5NXnLQJyANkbXJXPtX3d96tEFX+c

Score
10/10
monsterdefense_evasionstealer

Malware Config

Targets

    • Target

      0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665.exe

    • Size

      10.7MB

    • MD5

      3f4f5c57433724a32b7498b6a2c91bf0

    • SHA1

      04757ff666e1afa31679dd6bed4ed3af671332a3

    • SHA256

      0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665

    • SHA512

      cf572ca616b4f4e6e472e33e8d6d90b85d5885fa64d8bca4507450d66d65057efa771f58c31ea13f394fd0e7b0ff2fcaa9d54c61f28b27b98a79c27bc964f935

    • SSDEEP

      196608:mRu4YAJSAfoaqA6U+L5LsSmyYbH6t08RMQcCqcGUIRBw0xvH77Y:2u4YAJSAfoaZ0sSmpH6W8R/RVIc2vH7

    Score
    10/10
    monsterstealerdefense_evasion

    • Detects Monster Stealer.

    • Monster

      Monster is a Golang stealer that was discovered in 2024.

      stealermonster

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks