General
-
Target
ItroublveTSC.exe
-
Size
7.6MB
-
Sample
241212-dm16basrej
-
MD5
d3ef02070bfa081974b1c1d3d479d1af
-
SHA1
371913c4493df24aff9dd5511445d5a6d8c3e79c
-
SHA256
ae5c57ff6ae53782f3767e0fcffcafb0368af0530c8197cd0fcaab1ffda98859
-
SHA512
601c97e5fafd8a4ce57b8bc0301bec60d927c0b8ba1366e42a3bd6e0830f9c6448506df7586943b0c4f8763e67620ab6d5ec3967e61ba8bde43348aa004f5872
-
SSDEEP
98304:MUvsBAgasrYqwRhI3l72Qj1qCVgWBg+uoQs+YX5dfXHzjNZnXscacRX1t9XMGh8j:MMgIqwfI9jUC2gYBYv3vbW+DcGiwwnL
Behavioral task
behavioral1
Sample
ItroublveTSC.exe
Resource
win10ltsc2021-20241211-en
Malware Config
Targets
-
-
Target
ItroublveTSC.exe
-
Size
7.6MB
-
MD5
d3ef02070bfa081974b1c1d3d479d1af
-
SHA1
371913c4493df24aff9dd5511445d5a6d8c3e79c
-
SHA256
ae5c57ff6ae53782f3767e0fcffcafb0368af0530c8197cd0fcaab1ffda98859
-
SHA512
601c97e5fafd8a4ce57b8bc0301bec60d927c0b8ba1366e42a3bd6e0830f9c6448506df7586943b0c4f8763e67620ab6d5ec3967e61ba8bde43348aa004f5872
-
SSDEEP
98304:MUvsBAgasrYqwRhI3l72Qj1qCVgWBg+uoQs+YX5dfXHzjNZnXscacRX1t9XMGh8j:MMgIqwfI9jUC2gYBYv3vbW+DcGiwwnL
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3