General
- Target pcie_dante_snd_v1.4.zip
- Size 456KB
- Sample260531-gepdbsas8t
- SHA256 939b8327517296024e5011adf0324a47dce4e32a5629a4669c689654097b4600
Score
7/10
Malware Config
Targets
-
- Target Application.cmd
- Size 27B
- SHA256 2286fff6da651cce8ecf176d1d50c4ac101ca6c780cdccd536112184e3cf4959
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target dir.cc
- Size 301KB
- SHA256 455146d1a9f0ebe4733a3aa39902bbefe32066f08ff518e3ffb3bc3e62ff4141
Score3/10 -
- Target loader.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
Score1/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
Score1/10