General
- Target ShadowSniff.exe
- Size 852KB
- Sample260813-zndbjaxyfx
- SHA256 0f84920cdc2ca5bd6150f60b50bcb31bfcf9faf019bb7c868f10e2fea2fe2ac8
- MD5 70b6ab19e6b4340b62b7cc03379bd53d
- SHA1 b031ab4b37a1fd322b99687458044999b71b840f
- SHA512 af823e1b6597f8ba45014bab5ef5740f427e42790b2faa3a842ee7b5e7ae1487efa3f9ef4bb5f9483771f4a207f72db49ccff427ecb0ca5aab82f29dedcea3f8
- SSDEEP 12288:KyDHvyjGD26X82UTTbwLHsIO7+qBSIl1/jdlnac9jMA:RDqCDFXfUnbw4drddYA
- TLSH T192059E0BE3A940E8D467C678C6569627FBB2B4472330AA9F57E04A563F13EB05B3D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ShadowSniff.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target ShadowSniff.exe
- Size 852KB
- SHA256 0f84920cdc2ca5bd6150f60b50bcb31bfcf9faf019bb7c868f10e2fea2fe2ac8
- MD5 70b6ab19e6b4340b62b7cc03379bd53d
- SHA1 b031ab4b37a1fd322b99687458044999b71b840f
- SHA512 af823e1b6597f8ba45014bab5ef5740f427e42790b2faa3a842ee7b5e7ae1487efa3f9ef4bb5f9483771f4a207f72db49ccff427ecb0ca5aab82f29dedcea3f8
- SSDEEP 12288:KyDHvyjGD26X82UTTbwLHsIO7+qBSIl1/jdlnac9jMA:RDqCDFXfUnbw4drddYA
- TLSH T192059E0BE3A940E8D467C678C6569627FBB2B4472330AA9F57E04A563F13EB05B3D314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1