Resubmissions

19-01-2025 10:59

250119-m3gw2svjcw 10

19-01-2025 10:48

250119-mv98matqgv 8

General

  • Target

    6617-rocketleague-ssl.png

  • Size

    39KB

  • Sample

    250119-mv98matqgv

  • MD5

    a27e3788dd7e0171d8a8c8ec93fc962f

  • SHA1

    57c1d8e31e629a935e7060964acbe8ad788adc52

  • SHA256

    7c99df3fbb34e518ff75467ac763091af86e084ee3f4eae922344fe876a56d30

  • SHA512

    4cdf6346f7d2c49f7b68d8ac9e2ff45f946d14df84007a8eb95d561bbf2b9275458a3fec797c8b275b83ed7369f4c6f807bfc2069cf44f36a76db8bd698020f5

  • SSDEEP

    768:OwntOuOYffE0KpBuQktxnH0ZbjcrqgclyYnvZpkHzj0TfcbV6LjZOCJ0RSovUYQx:FnAuY0KDqtxnH6booyYnx+TA66f70RSt

Malware Config

Targets

    • Target

      6617-rocketleague-ssl.png

    • Size

      39KB

    • MD5

      a27e3788dd7e0171d8a8c8ec93fc962f

    • SHA1

      57c1d8e31e629a935e7060964acbe8ad788adc52

    • SHA256

      7c99df3fbb34e518ff75467ac763091af86e084ee3f4eae922344fe876a56d30

    • SHA512

      4cdf6346f7d2c49f7b68d8ac9e2ff45f946d14df84007a8eb95d561bbf2b9275458a3fec797c8b275b83ed7369f4c6f807bfc2069cf44f36a76db8bd698020f5

    • SSDEEP

      768:OwntOuOYffE0KpBuQktxnH0ZbjcrqgclyYnvZpkHzj0TfcbV6LjZOCJ0RSovUYQx:FnAuY0KDqtxnH6booyYnx+TA66f70RSt

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks