General
-
Target
bound.exe
-
Size
6.7MB
-
Sample
241214-am4dwstpbj
-
MD5
475eb5e7aaf43f7cff04181c7d43cd75
-
SHA1
4424f94a48e80cb1816bc9d25fb9aca09964a3d7
-
SHA256
45e10c1665ffb0b2293f5f81484ca57a7f151dba5721987965fd8206e551709f
-
SHA512
80a239e9d1c2e8418476ec8fb919991ccf261ee0efda6ab3ba66b359dc31c8ce79151dbe40476c1d360294e4128ac19fa038fdd0d80d12029ebc9cb39296d3b5
-
SSDEEP
98304:OdEtdFBbl3wI5amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK5SpXqQRSPMqts:OUFTUeN/FJMIDJf0gsAGK5SEQRSkqHad
Behavioral task
behavioral1
Sample
bound.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bound.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
bound.exe
-
Size
6.7MB
-
MD5
475eb5e7aaf43f7cff04181c7d43cd75
-
SHA1
4424f94a48e80cb1816bc9d25fb9aca09964a3d7
-
SHA256
45e10c1665ffb0b2293f5f81484ca57a7f151dba5721987965fd8206e551709f
-
SHA512
80a239e9d1c2e8418476ec8fb919991ccf261ee0efda6ab3ba66b359dc31c8ce79151dbe40476c1d360294e4128ac19fa038fdd0d80d12029ebc9cb39296d3b5
-
SSDEEP
98304:OdEtdFBbl3wI5amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK5SpXqQRSPMqts:OUFTUeN/FJMIDJf0gsAGK5SEQRSkqHad
-
Drops file in Drivers directory
-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Enumerates processes with tasklist
-
Hide Artifacts: Hidden Files and Directories
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Obfuscated Files or Information
1Command Obfuscation
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3