Resubmissions

08/07/2024, 21:57

240708-1vbxqatbpf 7

08/07/2024, 21:51

240708-1qz4ratake 7

General

  • Target

    Electron.exe

  • Size

    250.0MB

  • Sample

    240708-1vbxqatbpf

  • MD5

    e69bcb41e5c423c9a56550622f3a1141

  • SHA1

    c4551827cb75b57eb289401d1678434772fe590e

  • SHA256

    e7b69446e5e6f4cef022112f8c3df63331cb84b4e8900f70aa55832665d0a32a

  • SHA512

    b73670fb72e015970e30dc67a7789e2a69752cb20a8ba7176692425a93266b7ac5ef5d9d6815a49078970de3005f28b147b190dac913c8eb8cd3e270905e3ddf

  • SSDEEP

    24576:XYd8cqsScIOjTxdhJn46odi7Xw2KqSeGnXN09A3:6SHGr546hg23wXN09A

Malware Config

Targets

    • Target

      Electron.exe

    • Size

      250.0MB

    • MD5

      e69bcb41e5c423c9a56550622f3a1141

    • SHA1

      c4551827cb75b57eb289401d1678434772fe590e

    • SHA256

      e7b69446e5e6f4cef022112f8c3df63331cb84b4e8900f70aa55832665d0a32a

    • SHA512

      b73670fb72e015970e30dc67a7789e2a69752cb20a8ba7176692425a93266b7ac5ef5d9d6815a49078970de3005f28b147b190dac913c8eb8cd3e270905e3ddf

    • SSDEEP

      24576:XYd8cqsScIOjTxdhJn46odi7Xw2KqSeGnXN09A3:6SHGr546hg23wXN09A

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks