General
-
Target
Details_4.zip
-
Size
26KB
-
Sample
240805-qqn2daxcrk
-
MD5
c69971eef246e00918070738654844e5
-
SHA1
0ca3de6c8a8e8b8518b69527a328b33ecc7e9d5d
-
SHA256
2c24f5a04d9e78a2041a4c46a6cc6e110a03fd9577173be030370c6c2ef6a993
-
SHA512
16b7cfde1595f59fb7402e841046b5cfb900dbb35c2beb3ee4d3e1ad29dcb0381115aeae4eb78cabcfb1157cbe2b149aaeb4d4885ebdbefdb10fa8de3e547b63
-
SSDEEP
768:wTGiVlYv8RSiHTfsuDuso8MHMt+wVupKqh6nZzYA:KjI8RSiH7suDuq9PVuUqhsp
Malware Config
Targets
-
-
Target
Details.txt .exe
-
Size
26KB
-
MD5
c43fa1b082302f3b8e01d77fb95c78c6
-
SHA1
27609564e9f83b02aff9e7dc1b44f5d6063c46ba
-
SHA256
130e9e8849b77a47b3d6f5201e55db8117b71c1b0530eec25cc24605e8ad1e42
-
SHA512
095df280d357e6ff0f843b868cc17b8b1dfb428a07d1718f56a469d7f4b69df8f73cc39c83fc182015c8bdb932c828fd169ef1a09386995490014354498cd0a1
-
SSDEEP
768:QTGiVlYv8RSiHTfsuDuso8MHMt+wVupKqh6nZzY:qjI8RSiH7suDuq9PVuUqhs
Score7/10-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-