Resubmissions

03/10/2022, 11:05

221003-m6s4gsdber10

18/08/2022, 17:10

220818-vpp99shdaq8

General

  • Target
    MT10320221808-004. pdf.exe
  • Size 697KB
  • Sample220818-vpp99shdaq
  • SHA256 726fd095c55cdab5860f8252050ebd2f3c3d8eace480f8422e52b3d4773b0d1c
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      MT10320221808-004. pdf.exe
    • Size 697KB
    • SHA256 726fd095c55cdab5860f8252050ebd2f3c3d8eace480f8422e52b3d4773b0d1c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks