General
- Target philipp_stealer2.zip
- Size 442KB
- Sample260724-krf49swdja
- SHA256 3f8cc22ac09baed7b549f0305432825431e8869e8ef7fb091de608c8c57c79c5
- MD5 1e2cb8e6e1ec8bc2f00a942c32d15fa5
- SHA1 14e25a560c8b0540f64c32e2dea904f229006ac4
- SHA512 6b8a5f30cea7fb9b70ed03cd988ebd013f632e2b1bac78c2e929cc6c7271eb5c0f20b24b32a696f9d6760528486ffa78b4e39f8255e814d7161b5a99d3a21996
- SSDEEP 12288:CtXMDpbK1Ii78vEJ83k+3Eu1wL3q6Pj/SstJQanJkSekPEQ:CJYpbcL7gEq3kC1wL66PD9CanPekP9
- TLSH T16BA423AAFD3431F73D811B589894C81ACD91AAD3D97D06EE7C2C2E022D6D88593F605F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
msedge.dll
Resource
win10v2004-20260513-en
16 signatures
600 seconds
Malware Config
Targets
-
- Target msedge.dll
- Size 106KB
- SHA256 794a53776783bbe9565219b4c3ba2a99a92b32b08b9bbabe62747c83bd1e10f8
- MD5 de2c860873e7f6e60c69f531884e5caa
- SHA1 946ea6f7b52b53e8e437359362d8f739b3c6d329
- SHA512 e1a8e8881b2e98d67564fffeeb60019d42cf98bab5200dcbdfa9d5f25f8a7f6cfa57395e30860574370c6310a6479ccfc39fcd43ab32c5994e29572e84d32f42
- SSDEEP 1536:xQAf2GKHFLBOCNwc1TCq0XZzwsFD4qEnJyw8VzZqU35VwneghARA02e7UqnoqLw9:9hO+xjbeR9tfMUPWUniyx
- TLSH T1CBB3078A9C132DBBC005DEF4CD129900EA70FCC5479A5FDF67505CBA5E12AD8EE29B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Creates new service(s)
-
Loads dropped DLL
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1System Services
1Service Execution
1