General
-
Target
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
Size
365KB
-
Sample
200624-x46cqcval6
-
MD5
979723e1ba053b0c3470314471ab99d3
-
SHA1
847f098bb3f7a6747acb28ebfa2b8491134b6f6c
-
SHA256
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
SHA512
a0a51bf6d9941c0ae9cfd917b84c509bd72c6c6f86281ee4f0fde52c5cd331a5e05414685f6f868037206410e054a1e10879a06f416dff96d1f3d770bd196a8b
Static task
static1
Behavioral task
behavioral1
Sample
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956.exe
Resource
win7
Behavioral task
behavioral2
Sample
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956.exe
Resource
win10v200430
Malware Config
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/86ee096e2d86666c
https://mazedecrypt.top/86ee096e2d86666c
Extracted
C:\DECRYPT-FILES.txt
maze
http://aoacugmutagkwctu.onion/896209a675ffc94e
https://mazedecrypt.top/896209a675ffc94e
Targets
-
-
Target
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
Size
365KB
-
MD5
979723e1ba053b0c3470314471ab99d3
-
SHA1
847f098bb3f7a6747acb28ebfa2b8491134b6f6c
-
SHA256
f03172bd32ed16df6dda8e8146d24b073b864da59d669218fcc5e97835a5e956
-
SHA512
a0a51bf6d9941c0ae9cfd917b84c509bd72c6c6f86281ee4f0fde52c5cd331a5e05414685f6f868037206410e054a1e10879a06f416dff96d1f3d770bd196a8b
Score10/10-
Drops startup file
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Modifies service
-
Sets desktop wallpaper using registry
-