General

  • Target
    MapHackDesu3.rar
  • Size 485KB
  • Sample260731-ph549aad77
  • SHA256 7950c810cd998c3980f98a14fc9f512e062284ba4fa71f4dce44fb5bc1ba8ade
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      MapHack Desu3/MapHackDLon.exe
    • Size 713KB
    • SHA256 7b7870040b46909121d61c2787b32aeee66251d46ca999a858b78c7617efa44d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Target
      MapHack Desu3/uninstall.exe
    • Size 229KB
    • SHA256 4c61edd1aa6e941d0b5b144a7fffddf39732f8797c7ffa82dd88a924e1eb6e58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks