General
- Target regasm.exe
- Size 494KB
- Sample200624-m2cmj7desj
- SHA256 d86d0905e0be4fe91c68a6a80e48d40fe3d73c7527ce6e090068d38b34e534fd
- MD5 a08021dc1649508d49b581497af67870
- SHA1 43bb9abedb94c55b202430fbed46ec67174b4cd1
- SHA512 0d1593ced592b2146d48c3e9d0c424c07a495a13eead918a906e7c11ec5c3d7cfeaf6beb0672e7dfe707951e8cb53192af8202648309a46112f389a944ab8146
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
regasm.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
regasm.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target regasm.exe
- Size 494KB
- SHA256 d86d0905e0be4fe91c68a6a80e48d40fe3d73c7527ce6e090068d38b34e534fd
- MD5 a08021dc1649508d49b581497af67870
- SHA1 43bb9abedb94c55b202430fbed46ec67174b4cd1
- SHA512 0d1593ced592b2146d48c3e9d0c424c07a495a13eead918a906e7c11ec5c3d7cfeaf6beb0672e7dfe707951e8cb53192af8202648309a46112f389a944ab8146
- MD5 SHA1 SHA512
Score7/10-
Drops startup file
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext