General

  • Target
    do not open this (this will get hacked or information stolen).zip
  • Size 3.5MB
  • Sample260715-lrmgqagy6m
  • SHA256 7a66c61eaeeb4c53b26b126ef7dbc183619cf7725907c7580412502e87fb9fd5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      Set-up.exe
    • Size 683KB
    • SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      mpclient.dll
    • Size 4.9MB
    • SHA256 535a4ac091d7c144d26e14fe7d6744ed46a7034589f05d21d1b8262784aa2fe9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks