General
- Target Bundle.exe
- Size 372KB
- Sample260804-3c3zlashmb
- SHA256 4f662601b4869daa1a4012d2acf06d980adb2b053f24750f98473ab9674787ee
- MD5 6c2e42df32b6c46e091dac1e0b52bba4
- SHA1 7d2b02ab9698bcf5f3ba051a726830f0b8560c8d
- SHA512 20674a41882cb89146a80146073b0e02dff956af48289e9e92fc2c03be9291d8251cf5f5757b243c849c23f30dc9cfb26f9b74f2488f0c126d36109609c698e5
- SSDEEP 6144:2AlzfR3a9ngKrTcnpbTsjNB4Kv1cE1QiWo8GyOqXp9n6h+Smq7+Wk1trEpWFcDJq:2Aj3C/0bTkf6kCpRSmq7ULrEpWFWFW
- TLSH T183841213EA026B94C6109872D51B9BC0D166FE880F3970DF63FDB7672D797E0963A908
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bundle.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target Bundle.exe
- Size 372KB
- SHA256 4f662601b4869daa1a4012d2acf06d980adb2b053f24750f98473ab9674787ee
- MD5 6c2e42df32b6c46e091dac1e0b52bba4
- SHA1 7d2b02ab9698bcf5f3ba051a726830f0b8560c8d
- SHA512 20674a41882cb89146a80146073b0e02dff956af48289e9e92fc2c03be9291d8251cf5f5757b243c849c23f30dc9cfb26f9b74f2488f0c126d36109609c698e5
- SSDEEP 6144:2AlzfR3a9ngKrTcnpbTsjNB4Kv1cE1QiWo8GyOqXp9n6h+Smq7+Wk1trEpWFcDJq:2Aj3C/0bTkf6kCpRSmq7ULrEpWFWFW
- TLSH T183841213EA026B94C6109872D51B9BC0D166FE880F3970DF63FDB7672D797E0963A908
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1