General
-
Target
dangert.exe
-
Size
8.3MB
-
Sample
241130-z2vgzazler
-
MD5
c70193efe79e15dd2c5d7fcb8e4b5574
-
SHA1
cf5a97f0cddd3e896d9b7ef3847d28c6c2a16b90
-
SHA256
87dbcf083b04e3fd2cd119ab98e8e724671b5add5f726246571e8a4444666212
-
SHA512
30b98905aa96b7d9c30e43beb80472518c617007b3117697d192aba1f257885fbe47ae111772cf77da9cb7ea7afa410701fcd854c994cee8149de2d277ddf3e2
-
SSDEEP
196608:Q2uYQwfI9jUCzi4H1qSiXLGVi7DMgpZASEyQ0VMwICEc/jv:lIHziK1piXLGVE4UrS0VJr
Behavioral task
behavioral1
Sample
dangert.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dangert.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
dangert.exe
-
Size
8.3MB
-
MD5
c70193efe79e15dd2c5d7fcb8e4b5574
-
SHA1
cf5a97f0cddd3e896d9b7ef3847d28c6c2a16b90
-
SHA256
87dbcf083b04e3fd2cd119ab98e8e724671b5add5f726246571e8a4444666212
-
SHA512
30b98905aa96b7d9c30e43beb80472518c617007b3117697d192aba1f257885fbe47ae111772cf77da9cb7ea7afa410701fcd854c994cee8149de2d277ddf3e2
-
SSDEEP
196608:Q2uYQwfI9jUCzi4H1qSiXLGVi7DMgpZASEyQ0VMwICEc/jv:lIHziK1piXLGVE4UrS0VJr
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3