Resubmissions

13-01-2025 23:39

250113-3nq46s1jdv 10

13-01-2025 23:24

250113-3dy22asqbl 10

General

  • Target

    FiveM.exe

  • Size

    5.0MB

  • Sample

    250113-3dy22asqbl

  • MD5

    357b5269f142658d15f2ee3f0ff949f4

  • SHA1

    cfd0b2e11701095ed8e38c54c9a275125f989e9c

  • SHA256

    2ed4cfb162f0e3294823b18e6198465181c56e2d362b37f439c35f57fb92617a

  • SHA512

    3305293964364a9b72f30434834e8313883df8c125a40a4730b3795b27cdfe8deae5ebcfaa72f060b5e609764bb46c5a9872738fb691badee9106d78d1468498

  • SSDEEP

    49152:aOjPWNYQnU9fL9qbD1hS29mcC8Nwc8wN+O7ghsm/746YJZPjW/fgUOXdmjYeL9Hq:nnoDwcKheknnKXthTqXXLyb1TFx

Malware Config

Targets

    • Target

      FiveM.exe

    • Size

      5.0MB

    • MD5

      357b5269f142658d15f2ee3f0ff949f4

    • SHA1

      cfd0b2e11701095ed8e38c54c9a275125f989e9c

    • SHA256

      2ed4cfb162f0e3294823b18e6198465181c56e2d362b37f439c35f57fb92617a

    • SHA512

      3305293964364a9b72f30434834e8313883df8c125a40a4730b3795b27cdfe8deae5ebcfaa72f060b5e609764bb46c5a9872738fb691badee9106d78d1468498

    • SSDEEP

      49152:aOjPWNYQnU9fL9qbD1hS29mcC8Nwc8wN+O7ghsm/746YJZPjW/fgUOXdmjYeL9Hq:nnoDwcKheknnKXthTqXXLyb1TFx

    • Detected google phishing page

    • A potential corporate email address has been identified in the URL: [email protected]

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks