General

  • Target

    bce5589932044903237879f0e9e4840e.exe

  • Size

    1.1MB

  • Sample

    240927-k2rczsvdmk

  • MD5

    bce5589932044903237879f0e9e4840e

  • SHA1

    2df044c89198fde64eb0b5a7c8182addf3486a2b

  • SHA256

    1c123f8cd194d826aaa48e97fa67b9db9faa1a5a1ada139f367d56904f6e0c04

  • SHA512

    51b487e2cca437e77bd45a19fee976e04ab3e64f5723c946757566d77961e3420a779d2c55af1b607a5c8930370288dadaa6862f00645bddf5c8a7c75bc47de3

  • SSDEEP

    24576:qBZ3miL8zJa5e9AISUzOL9A5qU7wQmzXrbv4nlxlGYGeIVuj:I3miL8Me9AISUzCDIwQ0X4g5eIVu

Malware Config

Targets

    • Target

      bce5589932044903237879f0e9e4840e.exe

    • Size

      1.1MB

    • MD5

      bce5589932044903237879f0e9e4840e

    • SHA1

      2df044c89198fde64eb0b5a7c8182addf3486a2b

    • SHA256

      1c123f8cd194d826aaa48e97fa67b9db9faa1a5a1ada139f367d56904f6e0c04

    • SHA512

      51b487e2cca437e77bd45a19fee976e04ab3e64f5723c946757566d77961e3420a779d2c55af1b607a5c8930370288dadaa6862f00645bddf5c8a7c75bc47de3

    • SSDEEP

      24576:qBZ3miL8zJa5e9AISUzOL9A5qU7wQmzXrbv4nlxlGYGeIVuj:I3miL8Me9AISUzCDIwQ0X4g5eIVu

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks