General

  • Target
    SETUP_FILE_(PASS_KEY=2114).zip
  • Size 1.4MB
  • Sample260812-sy5efade73
  • SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SETUP_FILE_(PASS_KEY=2114).zip
    • Size 1.4MB
    • SHA256 76b6f1f0d24ca319e19e4ac99b003060026db129618b2c9ddfd4068a50794b83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PASS KEY.png
    • Size 7KB
    • SHA256 4c98958e90393ded39b89bc5339fc9d8de31732403e9b37739eaaadfc59ad6e2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏.zip
    • Size 1.3MB
    • SHA256 da1687474ece6ff9c0561a0c06f5d16445da9238507242f4c156b5e3ed0425ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      SETUP.zip
    • Size 1.4MB
    • SHA256 686c4245724b8bc07ad5084c4904eea27efa72b3abc63021251a6bd45382acf1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      setup.exe
    • Size 4.7MB
    • SHA256 f1cb8444675f9a1e517ec3f81bc1344ff98223d25842eb3c72d75b455c9d1fe5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v16

Tasks