General

  • Target

    84irujfg543.bin

  • Size

    731KB

  • Sample

    250419-3a2zhsyrw7

  • MD5

    eeeeca7c5c3afdde6f5c4398b059a1d8

  • SHA1

    5934cb06f70a6d15edf68e76d863b133d38290c4

  • SHA256

    9efb3b655d41be4ed8b3fba0b7f34f90cc7861da036cd3e3eff59f4fba0ff805

  • SHA512

    28fbb90cda8beff349d4072dbc9819d5ab7a7952ad08d97695490954b3cde2541a554f23e8932e9d573aa8318b7ec1f8a654914fc49fa1c11e4ae8be5d8e8527

  • SSDEEP

    12288:NVSPZTjl0bgga+MxHdHQ+93O6g6L7eh/nv47wrcxx:NoP9l0bgga+MxHdHrFVgTVv4c

Malware Config

Extracted

Family

stealc

Botnet

miauwonderlandhelp

C2

miauwonderland.help

Attributes
  • url_path

    /95e2879446ffa8f1.php

rc4.plain

Targets

    • Target

      84irujfg543.bin

    • Size

      731KB

    • MD5

      eeeeca7c5c3afdde6f5c4398b059a1d8

    • SHA1

      5934cb06f70a6d15edf68e76d863b133d38290c4

    • SHA256

      9efb3b655d41be4ed8b3fba0b7f34f90cc7861da036cd3e3eff59f4fba0ff805

    • SHA512

      28fbb90cda8beff349d4072dbc9819d5ab7a7952ad08d97695490954b3cde2541a554f23e8932e9d573aa8318b7ec1f8a654914fc49fa1c11e4ae8be5d8e8527

    • SSDEEP

      12288:NVSPZTjl0bgga+MxHdHQ+93O6g6L7eh/nv47wrcxx:NoP9l0bgga+MxHdHrFVgTVv4c

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v16

Tasks