General
-
Target
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
Size
365KB
-
Sample
200624-d7pvwk1dt2
-
MD5
979723e1ba053b0c3470314471ab99d3
-
SHA1
847f098bb3f7a6747acb28ebfa2b8491134b6f6c
-
SHA256
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
SHA512
a0a51bf6d9941c0ae9cfd917b84c509bd72c6c6f86281ee4f0fde52c5cd331a5e05414685f6f868037206410e054a1e10879a06f416dff96d1f3d770bd196a8b
Static task
static1
Behavioral task
behavioral1
Sample
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956.exe
Resource
win7
Behavioral task
behavioral2
Sample
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956.exe
Resource
win10
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/86ee096eb4b38e4a
https://mazedecrypt.top/86ee096eb4b38e4a
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/86c809624d06f3d1
https://mazedecrypt.top/86c809624d06f3d1
Targets
-
-
Target
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
Size
365KB
-
MD5
979723e1ba053b0c3470314471ab99d3
-
SHA1
847f098bb3f7a6747acb28ebfa2b8491134b6f6c
-
SHA256
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
SHA512
a0a51bf6d9941c0ae9cfd917b84c509bd72c6c6f86281ee4f0fde52c5cd331a5e05414685f6f868037206410e054a1e10879a06f416dff96d1f3d770bd196a8b
Score10/10-
Drops startup file
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Modifies service
-
Sets desktop wallpaper using registry
-