General
- Target zorbs stealer.exe
- Size 1.3MB
- Sample260811-t7tvqsfd23
- SHA256 89cdeaecd4b2e0d8724112f5682f3d645fc63e55d92d72e9b348e39524314a16
- MD5 e67c259a3ad680f7e2b03da35da3f512
- SHA1 8826d4fea5274f00a7faa08b45043367f53f34e6
- SHA512 14aa53f231ed5b56ef71973d182c21d5a8a37aa75a6892a7cc0f591bbebaf731f756c4c6fc1ab9dab6beb2fd1d179dedba1a390fbed1865530504939f6a90745
- SSDEEP 24576:xVG5z2LtthIOamcdZXrg6mR3ln1s6L3pZcxUdy0nOliUV836COS2A:fG5uttha3WVP9cxUdyXie836C9p
- TLSH T10F559F56B2B800F8C1ABC178C9561917EBB27806137597DB15D0C96A6F23FE12BBF324
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
zorbs stealer.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target zorbs stealer.exe
- Size 1.3MB
- SHA256 89cdeaecd4b2e0d8724112f5682f3d645fc63e55d92d72e9b348e39524314a16
- MD5 e67c259a3ad680f7e2b03da35da3f512
- SHA1 8826d4fea5274f00a7faa08b45043367f53f34e6
- SHA512 14aa53f231ed5b56ef71973d182c21d5a8a37aa75a6892a7cc0f591bbebaf731f756c4c6fc1ab9dab6beb2fd1d179dedba1a390fbed1865530504939f6a90745
- SSDEEP 24576:xVG5z2LtthIOamcdZXrg6mR3ln1s6L3pZcxUdy0nOliUV836COS2A:fG5uttha3WVP9cxUdyXie836C9p
- TLSH T10F559F56B2B800F8C1ABC178C9561917EBB27806137597DB15D0C96A6F23FE12BBF324
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1