Resubmissions

21-06-2024 00:41

240621-a16feaxhjq 10

20-06-2024 22:31

240620-2fmaksvalq 10

General

  • Target

    0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665

  • Size

    10.7MB

  • Sample

    240621-a16feaxhjq

  • MD5

    3f4f5c57433724a32b7498b6a2c91bf0

  • SHA1

    04757ff666e1afa31679dd6bed4ed3af671332a3

  • SHA256

    0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665

  • SHA512

    cf572ca616b4f4e6e472e33e8d6d90b85d5885fa64d8bca4507450d66d65057efa771f58c31ea13f394fd0e7b0ff2fcaa9d54c61f28b27b98a79c27bc964f935

  • SSDEEP

    196608:mRu4YAJSAfoaqA6U+L5LsSmyYbH6t08RMQcCqcGUIRBw0xvH77Y:2u4YAJSAfoaZ0sSmpH6W8R/RVIc2vH7

Malware Config

Targets

    • Target

      0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665

    • Size

      10.7MB

    • MD5

      3f4f5c57433724a32b7498b6a2c91bf0

    • SHA1

      04757ff666e1afa31679dd6bed4ed3af671332a3

    • SHA256

      0608a7559f895fab33ae65bbfbdc5bebd21eea984f76e1b5571c80906824d665

    • SHA512

      cf572ca616b4f4e6e472e33e8d6d90b85d5885fa64d8bca4507450d66d65057efa771f58c31ea13f394fd0e7b0ff2fcaa9d54c61f28b27b98a79c27bc964f935

    • SSDEEP

      196608:mRu4YAJSAfoaqA6U+L5LsSmyYbH6t08RMQcCqcGUIRBw0xvH77Y:2u4YAJSAfoaZ0sSmpH6W8R/RVIc2vH7

    • Detects Monster Stealer.

    • Monster

      Monster is a Golang stealer that was discovered in 2024.

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Hide Artifacts

2
T1564

Hidden Files and Directories

2
T1564.001

Discovery

System Information Discovery

1
T1082

Process Discovery

1
T1057

Tasks