16402933230611847011d10b352e4f858814282e62df77bd912f0978f2325f57

General

Target
Credentials-Bot-Goofish-v2.6.zip
Size 527KB
Sample260622-rywa4ac19j
SHA256 16402933230611847011d10b352e4f858814282e62df77bd912f0978f2325f57
MD5 3d8927b0ad34e5782963043426b07d6a
SHA1 e5060842fd401e3c1c04e16bab47a3db36539fb2
SHA512 7903ae5669619e2a024cd9c298afa265d2c23547643f5a8773dd93e1f36440ce68a377fc5c8cc1daebc6570c6cd18607d45058fba06424a8f6f92cc2e26f1d51
SSDEEP 12288:nvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBLbY7vPpCkIr:nWiEGnlQ/jwyil0X7kWv3icYLb9z
TLSH
T1B3B4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203E6EFC25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  Application.bat
- Size 23B
- SHA256 573578fb3b97321829b7adf2425b9bab6736c50f71d224947383ed66e7a750c2
- MD5 08ebf8e3d17c087093fbe53714bdf5c8
- SHA1 0f0be9893d46f3021d09ede2bf766ed541b23261
- SHA512 a58c994f47b1f8cb39bbea870724b25bacfe6fe0f65a4370049f13d834ee0cb9098973363a317d03a92ea750c507e4ed0a891bd4e3a874f361058a76dd782ea4
- MD5 SHA1 SHA512
Score

6^/10
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  boot.exe
- Size 753KB
- SHA256 d56ad8a35da042cc758b125d56ba34b217150653830f39ee47667fedef3da769
- MD5 4c042bf1c7236a12c8b2d7ddb4049d9d
- SHA1 8b14e63685ac2608a7ba8f8c9cc08a98e09c8ccd
- SHA512 5ee4098886b0f88525545e11f173665de825608e4cea0807150e55f7a1b81d92b13eb29352b5e66ee52c84ba940e20ec32edbd2969abd58a6821935d3b5b47ca
- SSDEEP 12288:hIxb6mgscIPv+xPBPx3ph7WfsnE6VTdUZ9nUt2ZvIX/19X7Bro0kLwqG:WlRcIOXrh7dEiTWZC8gXTFY
- TLSH
  T18BF49F19FBB101FAD5B78135CD16A90BEBB2BC050624566F43E06AAB6F377210E1F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  logo.txt
- Size 289KB
- SHA256 677a25b173119ba015f055d41a7e221c7ae8cc290770f44050a8857e8acab6ab
- MD5 e681cd6f86c2ca59d64dbe10b8c319b8
- SHA1 a9d694b3f2cfc81187c967a7901f9d6c899983e2
- SHA512 df56215581dc52902f19268375c856501bf1cdbe148d0b66db1ac3bbc5919e54e8f9c8803892bd97dd97344d7095f379c6983474f1d6944a8eebd87ef3fcb3e7
- SSDEEP 3072:NhLASwcVyWBCYR+DQACa7bPqeXtxSw0I0QzpM2JjbxwQZz90+JBC+3SeKqZssJ5V:bVFoBUAjq2txecM2PbO+sveKOf
- TLSH
  T1335408D2214C0FE2FAA74A81DD73CD961DB764F1868A168BCF1CF4A836641D2C6DDC62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6