General
- Target titellos_1.png
- Size 2.5MB
- Sample260522-rmkefsdx2n
- SHA256 36497a58b39dca8f8ad09a62e4eab6a56e07cf5af1bfb8f40fe356da49880071
- MD5 1cd98e18b8dc81ae3579954d415670c0
- SHA1 468a16a1059409b76539b79d8e92cd80fefebc88
- SHA512 41804de8777f5656442e93d6819d0df2ff718ce0d216b44edec39c5763a082340e7db4e28f2c57d6a3a799168d475a618a3ca5c82e937bdd4bc91396d11b091d
- SSDEEP 49152:7L8+irJSb9AUZeA4BOmAy6XFxSzzBhfkGUN8PhWDeR+LwdGle6W0RF5fL62bmE0f:7arJSy4eA44CSx07HUN8Ph0eRa46W0R2
- TLSH T104C53360FC4EC183C596A532C267CB3163316D43BB0A39116329F7B9597BB819B4DFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
titellos_1.png
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
titellos_1.png
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target titellos_1.png
- Size 2.5MB
- SHA256 36497a58b39dca8f8ad09a62e4eab6a56e07cf5af1bfb8f40fe356da49880071
- MD5 1cd98e18b8dc81ae3579954d415670c0
- SHA1 468a16a1059409b76539b79d8e92cd80fefebc88
- SHA512 41804de8777f5656442e93d6819d0df2ff718ce0d216b44edec39c5763a082340e7db4e28f2c57d6a3a799168d475a618a3ca5c82e937bdd4bc91396d11b091d
- SSDEEP 49152:7L8+irJSb9AUZeA4BOmAy6XFxSzzBhfkGUN8PhWDeR+LwdGle6W0RF5fL62bmE0f:7arJSy4eA44CSx07HUN8Ph0eRa46W0R2
- TLSH T104C53360FC4EC183C596A532C267CB3163316D43BB0A39116329F7B9597BB819B4DFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1