General
-
Target
eagleget_setup.exe
-
Size
10.0MB
-
Sample
250214-1pk87szmev
-
MD5
69f26e335a173717a64cd3b5458b9897
-
SHA1
7c5f488dd4da20ab7f98ef5308a358ba5a28dc6d
-
SHA256
33d92d63e2031bcde9fd355b5a9cb725e9203773cc05f1ceb87de2c08f042ac8
-
SHA512
4d2bc1dcbd77546d9fbdce56cbc14d776cd3b6c3f0ea4b15978058521d5ca8c7601e1cdfb493493ba4879287931e2b5325996ff10de2e0924c1a090deac0a712
-
SSDEEP
196608:oem6JZ4n1e50q+ZKxRlDnLMe3z6jy0fqMLL7o6YcN+L0OGEjuqL:oel74bq+87DnLdUbqM/k6YcNiGEjuI
Static task
static1
Behavioral task
behavioral1
Sample
eagleget_setup.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
eagleget_setup.exe
Resource
win10v2004-20250211-en
Malware Config
Targets
-
-
Target
eagleget_setup.exe
-
Size
10.0MB
-
MD5
69f26e335a173717a64cd3b5458b9897
-
SHA1
7c5f488dd4da20ab7f98ef5308a358ba5a28dc6d
-
SHA256
33d92d63e2031bcde9fd355b5a9cb725e9203773cc05f1ceb87de2c08f042ac8
-
SHA512
4d2bc1dcbd77546d9fbdce56cbc14d776cd3b6c3f0ea4b15978058521d5ca8c7601e1cdfb493493ba4879287931e2b5325996ff10de2e0924c1a090deac0a712
-
SSDEEP
196608:oem6JZ4n1e50q+ZKxRlDnLMe3z6jy0fqMLL7o6YcN+L0OGEjuqL:oel74bq+87DnLdUbqM/k6YcNiGEjuI
-
Detects Strela Stealer payload
-
Strela family
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Browser Extensions
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1