General

  • Target

    build.exe

  • Size

    3.6MB

  • Sample

    240927-1rtcla1fqp

  • MD5

    9b91b043453544a7e3683bd44840ddd9

  • SHA1

    4e8447f27fdbce918bc064c42be18b82353407ec

  • SHA256

    c050dabdd26b7ea0415924fec06cbeaf40d81eac76919773f68a6a26add9c3cb

  • SHA512

    1a9bc2b08f3c3a703ba1abbb028fbe5733363a6156be690e2fdd55dcb68eda57773d0107a451787244f0007fb4021646ebdf2147c324f2c84e684e8bd8d603ef

  • SSDEEP

    98304:uEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:Q3kSILYWqZAkuujCPX9YG9he5GnQCAJS

Malware Config

Targets

    • Target

      build.exe

    • Size

      3.6MB

    • MD5

      9b91b043453544a7e3683bd44840ddd9

    • SHA1

      4e8447f27fdbce918bc064c42be18b82353407ec

    • SHA256

      c050dabdd26b7ea0415924fec06cbeaf40d81eac76919773f68a6a26add9c3cb

    • SHA512

      1a9bc2b08f3c3a703ba1abbb028fbe5733363a6156be690e2fdd55dcb68eda57773d0107a451787244f0007fb4021646ebdf2147c324f2c84e684e8bd8d603ef

    • SSDEEP

      98304:uEjdGSi3kqXf0FLYWCLbi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:Q3kSILYWqZAkuujCPX9YG9he5GnQCAJS

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks