General

  • Target

    SecuriteInfo.com.Trojan.PWS.Steam.34994.18917.22410.exe

  • Size

    34KB

  • Sample

    241008-znp1bsyhmd

  • MD5

    39e7dc7f0cfa0ef6b646e794161d91a7

  • SHA1

    d2459e4a0b2559937e4d3cc1627efc12a870fe66

  • SHA256

    acf88f80055908ced219ba8c7ada933fda1b6861800e156e64491ab9077842eb

  • SHA512

    3de454b3be90c8a91a08d8af929d35ca4994b9c3410134b77ad638204d9a7de384999be7a5d33e2b57910ff247da98a58094738f77be9743ff0e0e07e46a1a27

  • SSDEEP

    768:hbOs+EjBO4cl767rI2jUzxoHEQLfp+Zc+wRrl6eUzyjbFCHy5b7I2lSVRR9wggRX:1Os+EDVLf9VRo7gRemy8s

Malware Config

Extracted

Family

statusrecorder

C2

78.153.130.24

Targets

    • Target

      SecuriteInfo.com.Trojan.PWS.Steam.34994.18917.22410.exe

    • Size

      34KB

    • MD5

      39e7dc7f0cfa0ef6b646e794161d91a7

    • SHA1

      d2459e4a0b2559937e4d3cc1627efc12a870fe66

    • SHA256

      acf88f80055908ced219ba8c7ada933fda1b6861800e156e64491ab9077842eb

    • SHA512

      3de454b3be90c8a91a08d8af929d35ca4994b9c3410134b77ad638204d9a7de384999be7a5d33e2b57910ff247da98a58094738f77be9743ff0e0e07e46a1a27

    • SSDEEP

      768:hbOs+EjBO4cl767rI2jUzxoHEQLfp+Zc+wRrl6eUzyjbFCHy5b7I2lSVRR9wggRX:1Os+EDVLf9VRo7gRemy8s

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks