General

  • Target

    33f19199d141d4ed74e407fc504e2fcf.exe

  • Size

    20KB

  • Sample

    241228-kkmy8sxndq

  • MD5

    33f19199d141d4ed74e407fc504e2fcf

  • SHA1

    25b4a5a133d1003065cb07a51adadc89e35f1204

  • SHA256

    fd76bbe47c2345ad98e153cb7483ec4962051a27e6c4ec5392db94a7f7afd1ab

  • SHA512

    6a9e16e538b6276657238577a6a9d29f9c1054e21599a1e2500549ccf4dab38c82e64271b3e9f850567fb327796b0ca83ecb779856dfd479ed96682b78aec345

  • SSDEEP

    384:uv0WLc01PT5cgafkrVUAd/ibYTJ4JVB00gMSSRJh:+5PTvaiVUdYAvgw

Malware Config

Extracted

Family

phorphiex

C2

185.215.113.66

Attributes
  • mutex

    6436646754

Targets

    • Target

      33f19199d141d4ed74e407fc504e2fcf.exe

    • Size

      20KB

    • MD5

      33f19199d141d4ed74e407fc504e2fcf

    • SHA1

      25b4a5a133d1003065cb07a51adadc89e35f1204

    • SHA256

      fd76bbe47c2345ad98e153cb7483ec4962051a27e6c4ec5392db94a7f7afd1ab

    • SHA512

      6a9e16e538b6276657238577a6a9d29f9c1054e21599a1e2500549ccf4dab38c82e64271b3e9f850567fb327796b0ca83ecb779856dfd479ed96682b78aec345

    • SSDEEP

      384:uv0WLc01PT5cgafkrVUAd/ibYTJ4JVB00gMSSRJh:+5PTvaiVUdYAvgw

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks