General
- Target SecuriteInfo.com.BackDoor.SpyBotNET.17.13531.12941
- Size 490KB
- Sample200625-bez5ay753a
- SHA256 024d2ae81292ee130b85ecc6f3e25aae7a3b4e733534bab0a475ac4e87c32952
- MD5 7a6d8e432559ab0a8e2f11457d4b1ae3
- SHA1 201e4f99b5b149ca029e4e0d6d839a20ecc47d99
- SHA512 db1384d967f5b48b6221dbd9207066b5c9494d4c8c063a4cdb7e6bfe0aaf6790bb2ace6f82f4bee75ef0ee505d3b2d7f83b9122b0011c9a2f11a94161cad701e
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BackDoor.SpyBotNET.17.13531.12941.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BackDoor.SpyBotNET.17.13531.12941.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.BackDoor.SpyBotNET.17.13531.12941
- Size 490KB
- SHA256 024d2ae81292ee130b85ecc6f3e25aae7a3b4e733534bab0a475ac4e87c32952
- MD5 7a6d8e432559ab0a8e2f11457d4b1ae3
- SHA1 201e4f99b5b149ca029e4e0d6d839a20ecc47d99
- SHA512 db1384d967f5b48b6221dbd9207066b5c9494d4c8c063a4cdb7e6bfe0aaf6790bb2ace6f82f4bee75ef0ee505d3b2d7f83b9122b0011c9a2f11a94161cad701e
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext