General

  • Target
    Zero's Hub.zip
  • Size 116.1MB
  • Sample260908-bf62waar5v
  • SHA256 8dc451e5f6bb50cff6053a161f33dec05290fd59ae98ef29cfba11abe998c781
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Zero's Hub/Zero’s Hub.exe
    • Size 180.1MB
    • SHA256 1f430ee3da64c334fc9480f136dd4d8daf97e6ad064a59eab8c1ff983b4c7e56
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Uses browser remote debugging

      Can be used to control the browser and steal sensitive information such as credentials and session cookies.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks