General

  • Target

    Identification.bin.zip

  • Size

    2.9MB

  • Sample

    240823-lax7wswclf

  • MD5

    2510a524f0f0491da7b502b811297529

  • SHA1

    d67a85251c74a73a87071b7564bc3785023a301e

  • SHA256

    24b83e8717f2a804863f11dca9f9869e1e34ced3f1c1f1dce16abf4ca1ec0e45

  • SHA512

    a167e01dacbb5d838a254e13c8d1714a82b4f17415cb68a66dd3cc971cb1d7c6513dbebfec38a21e3b28d49fdad471ac10145a6eb926a3d746ee80ce0e0a4904

  • SSDEEP

    49152:X0+hCH8gLGesffQJgpugNoYPr07Onfplp68Wkv5G2mpjYh+wm46Fh58z7mXnIQdd:EzdG93QJpUwa/p6Gv42mpy+wX6zY7odd

Malware Config

Targets

    • Target

      Identification.bin

    • Size

      5.6MB

    • MD5

      7916d9dbba2543dfcafd0be76eb3e965

    • SHA1

      64d4efa6e1b124d758285f6d8069ce117a5a45dc

    • SHA256

      ee532f95590e3b36c2678033213eb18bd9e579c27cbc65e6afe5f23aac6f019c

    • SHA512

      d3af74e625fe46df4feace1e47793db53bebbaa0645d34030e98575527df686341e4bda47d660531c33e0ff0dcb1966b0c012c1704da9ed1296d8031cbce7b6c

    • SSDEEP

      49152:qyHmza1sJ+5pTE5k6DBFNHpwEmtiS7Z6G5FwR0Lzhzwvi6fScmW73tOhsd41L3vi:qx2Zzci6Zh3asd4pCPaQ

    • DeerStealer

      Detects DeerStealer malware - JaffaCakes118.

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks