General

  • Target

    PARANOID CHECKER V4.2.7.zip

  • Size

    11.6MB

  • Sample

    241006-x4p9xswaqd

  • MD5

    875849c78e1edfd95dc34028a2fb8300

  • SHA1

    648bcd5287ee4e80b170453addfc5a2afeab0ba7

  • SHA256

    8c09a321764b6ca61eafcfb69894fd80321900585fe47db6f11eb04e9401cce8

  • SHA512

    0e375e44dffa6f50046cba650dc9467c5ef446042a5c1af817e8b143d57cd1b9b2bc959b04d61ed9588272306681993e0485f602bc8c1ade9094314803e570af

  • SSDEEP

    196608:EGJNhExKiTDR6R6p1Vs4J0tgoy+k+6y51hiZz1sLt8hk9DWPnJOEIk/NxMwwNJyv:EGJNhExXfRQt4JQhYhyRewt8hk9DWxOA

Malware Config

Targets

    • Target

      PARANOID CHECKER V4.2.7.zip

    • Size

      11.6MB

    • MD5

      875849c78e1edfd95dc34028a2fb8300

    • SHA1

      648bcd5287ee4e80b170453addfc5a2afeab0ba7

    • SHA256

      8c09a321764b6ca61eafcfb69894fd80321900585fe47db6f11eb04e9401cce8

    • SHA512

      0e375e44dffa6f50046cba650dc9467c5ef446042a5c1af817e8b143d57cd1b9b2bc959b04d61ed9588272306681993e0485f602bc8c1ade9094314803e570af

    • SSDEEP

      196608:EGJNhExKiTDR6R6p1Vs4J0tgoy+k+6y51hiZz1sLt8hk9DWPnJOEIk/NxMwwNJyv:EGJNhExXfRQt4JQhYhyRewt8hk9DWxOA

    • BlackGuard

      Infostealer first seen in Late 2021.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks