General

  • Target
    file_a6357da6a05d7266.exe
  • Size 3.7MB
  • Sample260807-wyv3js1flb
  • SHA256 f5ebd8f8e5217df1c726beb523c00d49992d6d205589509cbe2c581b6aab29b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      file_a6357da6a05d7266.exe
    • Size 3.7MB
    • SHA256 f5ebd8f8e5217df1c726beb523c00d49992d6d205589509cbe2c581b6aab29b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks