General
- Target AppLauncher_Install_v9.22.8.exe
- Size 690KB
- Sample260922-215yeshd27
- SHA256 567acce37e06013140b7f0b843e799ec62ca9e4486f9773323c10397eba0607d
- MD5 6f4ae21dc4bdf98f678171a08a6dc57a
- SHA1 a53b1b31155170fcac52afa1d1f8cd6c3d6e572e
- SHA512 bd4541c610a52028fef4c44aab2e7736c4635f4af10aa44aa59e6d44b43fdce0421d27fb59c50cb74c067e16141bf8aa8b94d4762bc134e6dd3c9a94f3231050
- SSDEEP 12288:zfXgMI9LJlnKONTTYcb0dRbb2YGsLW5QR9hXeuakDR5Il5+iwhEn:zYM1WTY1dRbb2XsLpTu2R5Il5vwQ
- TLSH T1B5E4F1B0F2D294EAE246663FA532731297B8FC0287B165FF1380265B7C2E6D94D36711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target AppLauncher_Install_v9.22.8.exe
- Size 690KB
- SHA256 567acce37e06013140b7f0b843e799ec62ca9e4486f9773323c10397eba0607d
- MD5 6f4ae21dc4bdf98f678171a08a6dc57a
- SHA1 a53b1b31155170fcac52afa1d1f8cd6c3d6e572e
- SHA512 bd4541c610a52028fef4c44aab2e7736c4635f4af10aa44aa59e6d44b43fdce0421d27fb59c50cb74c067e16141bf8aa8b94d4762bc134e6dd3c9a94f3231050
- SSDEEP 12288:zfXgMI9LJlnKONTTYcb0dRbb2YGsLW5QR9hXeuakDR5Il5+iwhEn:zYM1WTY1dRbb2XsLpTu2R5Il5vwQ
- TLSH T1B5E4F1B0F2D294EAE246663FA532731297B8FC0287B165FF1380265B7C2E6D94D36711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1