General

  • Target
    Уведомление от 03.07.2026.rar
  • Size 3.1MB
  • Sample260703-yeacvaby2n
  • SHA256 ccfbbe5b03875658628f390d655fe1f469d0b1ae5e37288efe396fb1a3b32a5c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      GUP.exe
    • Size 789KB
    • SHA256 b9c965aa538c21b4702ec7e4f3ac47fc999e1cd505d69e0896a309f7956bb351
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      README.txt
    • Size 112B
    • SHA256 15de4aab8d9ec1864d286f9007952d18919a4b1599d068ebedb3ede021d830bf
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      libcurl.dll
    • Size 10.2MB
    • SHA256 a980505285bc469dc4b19a9df9d48db17cd28f97c56b68ef11dadb8c5023040e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks