General

  • Target

    EclipsePlayerLauncher.exe

  • Size

    874KB

  • Sample

    240821-sqh68syhnn

  • MD5

    7a1acb733866558632ab929bef57828a

  • SHA1

    3351f2d2648aaeadad4d6e7d212152f6ed7bc615

  • SHA256

    4e839b8267d170c054a00292d0d93440b9709066db6f787132f866dcfa8a9dd4

  • SHA512

    b074123fd9b8e01528ef49c9d46a20c9c33b634e5b367b8f8e575f6b63687319648c822ae4d54b71bcfa8477f087c1cb29bfa72a64a58c3436cd72e11714d91c

  • SSDEEP

    12288:ljh5+ZymNqi1Uc6Tn0aYWBsTKIgCTsjfLxLS+AMDRFJh8H:ljeZjN5t6Tn0a7VI9TifLxm+AMD/Jhe

Malware Config

Targets

    • Target

      EclipsePlayerLauncher.exe

    • Size

      874KB

    • MD5

      7a1acb733866558632ab929bef57828a

    • SHA1

      3351f2d2648aaeadad4d6e7d212152f6ed7bc615

    • SHA256

      4e839b8267d170c054a00292d0d93440b9709066db6f787132f866dcfa8a9dd4

    • SHA512

      b074123fd9b8e01528ef49c9d46a20c9c33b634e5b367b8f8e575f6b63687319648c822ae4d54b71bcfa8477f087c1cb29bfa72a64a58c3436cd72e11714d91c

    • SSDEEP

      12288:ljh5+ZymNqi1Uc6Tn0aYWBsTKIgCTsjfLxLS+AMDRFJh8H:ljeZjN5t6Tn0a7VI9TifLxm+AMD/Jhe

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks