General
-
Target
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0
-
Size
363KB
-
Sample
200624-kqe6q1bcqs
-
MD5
7f152df418bbb484337fc8ed1383b27d
-
SHA1
fc433e7db24eb38690746575375d9890457e6711
-
SHA256
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0
-
SHA512
b6ebda7bd92d7248f18d796b808d0fd2cd7e1914ad51e3e3f2a0512a0d0a17e9b4bf6dd0d3e7cb1f239489d52ac5e666e17c27ab66b04a3ac0bd0783efef0f97
Static task
static1
Behavioral task
behavioral1
Sample
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0.exe
Resource
win7
Behavioral task
behavioral2
Sample
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0.exe
Resource
win10v200430
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6b170c9a9bc68372
https://mazedecrypt.top/6b170c9a9bc68372
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/6d8b0cd2ec24b80a
https://mazedecrypt.top/6d8b0cd2ec24b80a
Targets
-
-
Target
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0
-
Size
363KB
-
MD5
7f152df418bbb484337fc8ed1383b27d
-
SHA1
fc433e7db24eb38690746575375d9890457e6711
-
SHA256
ac457fc7c907ca04a4aa2e243d4b5120c58d338b44771c84e0d282d625d463a0
-
SHA512
b6ebda7bd92d7248f18d796b808d0fd2cd7e1914ad51e3e3f2a0512a0d0a17e9b4bf6dd0d3e7cb1f239489d52ac5e666e17c27ab66b04a3ac0bd0783efef0f97
Score10/10-
Drops startup file
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Modifies service
-