General

  • Target
    stlupdt.7z
  • Size 3.5MB
  • Sample260705-te21msdw4w
  • SHA256 9c93454072525b2c4bd008221b42598260f5149135fd18e8df55027d80b54cec
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      sslconf.exe
    • Size 29KB
    • SHA256 fd826215add30c1319eefa291b6eaf8ddfa7720cfe816c49aef6fe8a88de7939
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks