General

  • Target

    85d96a1ba8fa7426e48bcf430d305c6e4764db53fb86abbe53d9b80c5e474e72.exe

  • Size

    1.1MB

  • Sample

    240929-btjhqsvbkm

  • MD5

    de030225e0b09c45241b8169a8a96155

  • SHA1

    bf568cfc34b708da4e740b13e91058d3a241fdd9

  • SHA256

    85d96a1ba8fa7426e48bcf430d305c6e4764db53fb86abbe53d9b80c5e474e72

  • SHA512

    b1bf29226496e95f7959e1536cbb8346d224a0e9f8a8b241195684eb4639a96898308d2b2771d6567700a0187f79c9ece12094865666df78136c60581d90b1dd

  • SSDEEP

    24576:Al73m7L8JyNMqJUUvYo9lsnL2iq47DSuH7GJ/i+kG3O:E3m7L8YMquUvf8L2iq4a2GJaC+

Malware Config

Targets

    • Target

      85d96a1ba8fa7426e48bcf430d305c6e4764db53fb86abbe53d9b80c5e474e72.exe

    • Size

      1.1MB

    • MD5

      de030225e0b09c45241b8169a8a96155

    • SHA1

      bf568cfc34b708da4e740b13e91058d3a241fdd9

    • SHA256

      85d96a1ba8fa7426e48bcf430d305c6e4764db53fb86abbe53d9b80c5e474e72

    • SHA512

      b1bf29226496e95f7959e1536cbb8346d224a0e9f8a8b241195684eb4639a96898308d2b2771d6567700a0187f79c9ece12094865666df78136c60581d90b1dd

    • SSDEEP

      24576:Al73m7L8JyNMqJUUvYo9lsnL2iq47DSuH7GJ/i+kG3O:E3m7L8YMquUvf8L2iq4a2GJaC+

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks