General
-
Target
SnoserP2.exe
-
Size
8.2MB
-
Sample
241201-szzwcavmdz
-
MD5
5f6e4a52683aa6c7187e0ef0b6229624
-
SHA1
fa873530d46f6c52336d389226f6fb354a3ce009
-
SHA256
fc8d444f21d4438f7fc22c632adeb2f22ccfef5b9292b9b4997b969f9eef8685
-
SHA512
964e24bb00b412ea7002b2189b478697189e410eb78e12c6b5c059cc80bdcaf11d2dc1850839bb44dec4e266b4ca45830f167f32b694a03d81fa160412a3e97e
-
SSDEEP
196608:3vQXwuLtrurErvI9pWjgN3ZdahF0pbH1AYSEp7CtQsNI/Sx3C1Z:1GurEUWjqeWxQR6nAYZ
Behavioral task
behavioral1
Sample
SnoserP2.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
SnoserP2.exe
-
Size
8.2MB
-
MD5
5f6e4a52683aa6c7187e0ef0b6229624
-
SHA1
fa873530d46f6c52336d389226f6fb354a3ce009
-
SHA256
fc8d444f21d4438f7fc22c632adeb2f22ccfef5b9292b9b4997b969f9eef8685
-
SHA512
964e24bb00b412ea7002b2189b478697189e410eb78e12c6b5c059cc80bdcaf11d2dc1850839bb44dec4e266b4ca45830f167f32b694a03d81fa160412a3e97e
-
SSDEEP
196608:3vQXwuLtrurErvI9pWjgN3ZdahF0pbH1AYSEp7CtQsNI/Sx3C1Z:1GurEUWjqeWxQR6nAYZ
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3