General
-
Target
4992863093cb396628acfb86b56af1e6.bin
-
Size
463KB
-
Sample
241202-bp5v6s1rhv
-
MD5
d7359a226c7fa1b8f490177e3aff1699
-
SHA1
6901aefca6f928c2cb774b9a75ff79a15a2dab01
-
SHA256
a4252c087d001b8018bb7b654e6c9c9e4d77c54ca6d0dfe0f0f89ad2732808cf
-
SHA512
4be2e10e78f48aa52bcd0d736c84ed4102993210677bf0b96e4d10be9499a072137d88ba0c0df8f35fde9fe52221ad12f87ccc676a4ef3aeade8dd6650fc8cb9
-
SSDEEP
12288:mZUHnhYf9NwR5F034PiLilNhcGuscZOPvND:QUBYfMRfRPEilznuUlD
Behavioral task
behavioral1
Sample
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56.exe
-
Size
1.1MB
-
MD5
4992863093cb396628acfb86b56af1e6
-
SHA1
4f61861be36c992e420dd387997322130ba2164d
-
SHA256
c4fcb04af557153060abc9488b017c3875074dcda7a84c59a18cee798e95ef56
-
SHA512
d6dd52bdd607837ba685ee672410db23d3cc0a1de2a01ef5ad46e55401e205ac14795591fb03e3deb330a93c1a587d6e4d5a065a42d7b2da5ad069ae60cae8fc
-
SSDEEP
24576:kMcsnSHziAtR/JTSje9XB0Jh0lhSMXl5jRxIKy9a:kM/nSHN7/Aj0XB0QpjfIKy9a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1