General

  • Target

    4f083d220b0b91a3332be0404aed011e.bin

  • Size

    453KB

  • Sample

    240826-bqk76axaje

  • MD5

    0b0ebc0f299c04e3b41f501c5af5c7a6

  • SHA1

    b399af768ba6d0392fd7603c57ced4c08895423c

  • SHA256

    7d5b97c76e9206c3b61ab08eea1a2336722727eacd5ddd7070365ee910630da3

  • SHA512

    767fcb69cd2c521a6648ed1f0932dd43ef8bc594d16401c346fbf1c2257cc4b62cae0ac36051e1c52d28e8aab517df0b798dc447007a464d46f328ce2c3200c5

  • SSDEEP

    12288:dj52RaUNsU64EwtidP+OzLddt6ph++cA0UvZdOAnJ2I8WxPZ:djWdsU67K6+Odz6YDUvG62IZ

Malware Config

Targets

    • Target

      fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0.exe

    • Size

      896KB

    • MD5

      4f083d220b0b91a3332be0404aed011e

    • SHA1

      f8de24fa77d1bb1d2f8089a2104e3ca462fc4da8

    • SHA256

      fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0

    • SHA512

      b71786e52d42aa77ff58c644392506df5fc5ddcdc49d75605a2d4e21d4f17d5662fcd1676e6eb22a530b5718e541a3452fcd8a2237bf6388b9bb2ffef0628797

    • SSDEEP

      12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarT/:JqDEvCTbMWu7rQYlBQcBiT6rprG8av/

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks