General

  • Target

    e450ca946d4bf6173ebe3f00c3d08d81.bin

  • Size

    402KB

  • Sample

    240709-ctwnqsteqh

  • MD5

    65603b2126f0f6b0858979ff7d95ca74

  • SHA1

    4d25a1aa0a06eaad27f93bd013dc11d304f216c2

  • SHA256

    d278aa079205cf4bb605de28bc6d6eca5a63b4cdd9d0c7488c40945d2b90b0a0

  • SHA512

    55eb708f7506b6eea7abb83e7fb8d0adae5a4bb20c64d9446c8609fdfc40c730c24e2a46144ab5ae97880460692fb67aaf5b8d72441da9f722bec6a11a7cad67

  • SSDEEP

    12288:b4EVLllbzI6QoKD4sBVQKACTITZJ1Ls/mST:5BHsnoKD5XTi4

Malware Config

Targets

    • Target

      44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff.exe

    • Size

      914KB

    • MD5

      e450ca946d4bf6173ebe3f00c3d08d81

    • SHA1

      3653f8f0231dfad94100f3f3ae3fbae0c3b0d208

    • SHA256

      44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff

    • SHA512

      9c884eb29f2d084973a7cc760d3c4e41f3601ef9b22081e083e371301d5b6b22d8e52cacaf6e4a2fd7466d5819876a69921326fa59a24ff75ed85297cda88fba

    • SSDEEP

      24576:Wi1kZ9SO9RfhEQ9A1rQmbGSbcG4SuyKs+P/3aC:rkZ9SO9RfpmOSbcGdJKsyaC

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks