Resubmissions

24/08/2024, 18:53

240824-xjx42aterc 7

24/08/2024, 18:49

240824-xgvwwstejb 7

24/08/2024, 18:38

240824-xacfzavgnj 7

General

  • Target

    gorillatagbutfpsgame.exe

  • Size

    12.0MB

  • Sample

    240824-xacfzavgnj

  • MD5

    8534ac47b28a212018b21ea9ffc8a663

  • SHA1

    9fa76cafda9a33f38309861e2a025cd490fe3191

  • SHA256

    1bf1da28d51619611dfda7f96d556bdfb0d4bb0f0e79922dd33223fc06cb4a99

  • SHA512

    a1a227241ea579c0225078c4069dbe392b662a4c5be8d0541ead67ff8796afa3aad47e96c5a0dc238d3a10d5d9436c469229b0723fb7f27a6cdeda0938c8b0ae

  • SSDEEP

    393216:t7gCudL01+l+uq+Vvz1+TtIiLf0VQxUgOGy:t+R01+l+uqgvz1QtIh9

Malware Config

Targets

    • Target

      gorillatagbutfpsgame.exe

    • Size

      12.0MB

    • MD5

      8534ac47b28a212018b21ea9ffc8a663

    • SHA1

      9fa76cafda9a33f38309861e2a025cd490fe3191

    • SHA256

      1bf1da28d51619611dfda7f96d556bdfb0d4bb0f0e79922dd33223fc06cb4a99

    • SHA512

      a1a227241ea579c0225078c4069dbe392b662a4c5be8d0541ead67ff8796afa3aad47e96c5a0dc238d3a10d5d9436c469229b0723fb7f27a6cdeda0938c8b0ae

    • SSDEEP

      393216:t7gCudL01+l+uq+Vvz1+TtIiLf0VQxUgOGy:t+R01+l+uqgvz1QtIh9

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      gorillatagbutfpsgame.pyc

    • Size

      3KB

    • MD5

      c71df5ff4e2651114f65ea90aae5f7e3

    • SHA1

      517817af2ea1bff1612325abb488193b14786352

    • SHA256

      b52e997c4575b3d1b1d03c973c15be2953c268e33805ae0d7b44846dc4a7edd8

    • SHA512

      29804e21832da26360646ee8cf22a31942f7a98bcbb4dea053bb2536c3df48368e90fea16191abbca49bdbd4729fce2a7e4fd755375886bbcfaf6a725f03314e

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks