General
-
Target
Details_3.zip
-
Size
26KB
-
Sample
240805-qqn2daxcrj
-
MD5
824cdbaa6ed50e18c7acd5447a22da1a
-
SHA1
5213bd68eebafa0d6336f66c9828b2d4735cc781
-
SHA256
80031e0b4d507f626d772e72bc2dafda8b71e2c29f5a63d08a58635f3a3d5072
-
SHA512
a76cfbff7eca91f8676efaebd42338aa2ff49714a194bff92d1364ee31e58b7115699872dbf2b295a13fa97691f7fdc95024458dea45a2bcd60c31e5b4165ee7
-
SSDEEP
768:hTGiVlYv8RSiHTfsuDuso8MHMt+wVupKqh6nZzYF:NjI8RSiH7suDuq9PVuUqhsE
Malware Config
Targets
-
-
Target
Details.txt .exe
-
Size
26KB
-
MD5
c43fa1b082302f3b8e01d77fb95c78c6
-
SHA1
27609564e9f83b02aff9e7dc1b44f5d6063c46ba
-
SHA256
130e9e8849b77a47b3d6f5201e55db8117b71c1b0530eec25cc24605e8ad1e42
-
SHA512
095df280d357e6ff0f843b868cc17b8b1dfb428a07d1718f56a469d7f4b69df8f73cc39c83fc182015c8bdb932c828fd169ef1a09386995490014354498cd0a1
-
SSDEEP
768:QTGiVlYv8RSiHTfsuDuso8MHMt+wVupKqh6nZzY:qjI8RSiH7suDuq9PVuUqhs
Score7/10-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-