General

  • Target

    DDOS.exe

  • Size

    184KB

  • Sample

    241115-jsy6sszqfz

  • MD5

    d549b3349a0bab5cfdbd57de2d708031

  • SHA1

    110d550c7da20bca6d8ec57287f742dc4bcae9b8

  • SHA256

    b1303bcc92daefbe961178aafd685f079c3ebf168d6871a415598bcb461217d2

  • SHA512

    3c2b02a58a0c6ed06b163b63b5cf6cc96836cb95718dff63ce9d7d5c2b8283fe3ab3060b425ca17f4b4ca46678ba9be87ece08c76ebd75b515a9e82db8809f56

  • SSDEEP

    3072:55O7Vpqhyrg/7k5CXmNPlCIdltwzjeymGV1LMl5Mm3hLe9hqYQcZlANa:55O7+P/7kGmPCStwzjeymGV1LMl5Mm3z

Malware Config

Targets

    • Target

      DDOS.exe

    • Size

      184KB

    • MD5

      d549b3349a0bab5cfdbd57de2d708031

    • SHA1

      110d550c7da20bca6d8ec57287f742dc4bcae9b8

    • SHA256

      b1303bcc92daefbe961178aafd685f079c3ebf168d6871a415598bcb461217d2

    • SHA512

      3c2b02a58a0c6ed06b163b63b5cf6cc96836cb95718dff63ce9d7d5c2b8283fe3ab3060b425ca17f4b4ca46678ba9be87ece08c76ebd75b515a9e82db8809f56

    • SSDEEP

      3072:55O7Vpqhyrg/7k5CXmNPlCIdltwzjeymGV1LMl5Mm3hLe9hqYQcZlANa:55O7+P/7kGmPCStwzjeymGV1LMl5Mm3z

    • Zingo family

    • Zingo stealer

      Zingo is an info stealer first seen in March 2022.

    • Zingo stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks