Resubmissions

27-09-2024 15:01

240927-sdyq6axhjl 10

27-09-2024 15:00

240927-sdb76axgpp 10

General

  • Target

    lemon.exe

  • Size

    1.1MB

  • Sample

    240927-sdyq6axhjl

  • MD5

    c2603be1c6ec01846c7b85cc5665e657

  • SHA1

    b4f4ac436827ce16f3f28af5e9be7093a3afa331

  • SHA256

    9c57d9431e5a3b8206bceadad97108bb59bd08e0e90a4946c41ca268a2093412

  • SHA512

    d1aeb744fef4c324da93e8bb509ab429f4e092c0cd76f1c9767249819df6ae9e7a9e3829c72e306f8d6e556807a2825a8f852933d6ca5c80ac8cb0f2d1b1ee31

  • SSDEEP

    24576:qBZ3miL8zJa5e9AISUzOL9A5qPbwQmzXrbv4nlxlGKGeIVuj:I3miL8Me9AISUzCDzwQ0X4g/eIVu

Malware Config

Targets

    • Target

      lemon.exe

    • Size

      1.1MB

    • MD5

      c2603be1c6ec01846c7b85cc5665e657

    • SHA1

      b4f4ac436827ce16f3f28af5e9be7093a3afa331

    • SHA256

      9c57d9431e5a3b8206bceadad97108bb59bd08e0e90a4946c41ca268a2093412

    • SHA512

      d1aeb744fef4c324da93e8bb509ab429f4e092c0cd76f1c9767249819df6ae9e7a9e3829c72e306f8d6e556807a2825a8f852933d6ca5c80ac8cb0f2d1b1ee31

    • SSDEEP

      24576:qBZ3miL8zJa5e9AISUzOL9A5qPbwQmzXrbv4nlxlGKGeIVuj:I3miL8Me9AISUzCDzwQ0X4g/eIVu

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks