General
- Target heJAzvK0GscghfR.exe
- Size 400KB
- Sample200626-ttw61vb2ba
- SHA256 355c8b8775f6b728776e7fae1aae749b43475b0d6ee34d244bba666a434a4e70
- MD5 4231c7553b52c26401fd1d6eae02d696
- SHA1 2193237dff9a16b7e5375b9e342c2b2b0774f5a8
- SHA512 67d6a493bb92316bce3f42f5589665ac6f7709632e73082e364895fccd9aa8849a769c5b22373ee25625ef79afa9f99918502e9682915880619ffb923898686f
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
heJAzvK0GscghfR.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
heJAzvK0GscghfR.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target heJAzvK0GscghfR.exe
- Size 400KB
- SHA256 355c8b8775f6b728776e7fae1aae749b43475b0d6ee34d244bba666a434a4e70
- MD5 4231c7553b52c26401fd1d6eae02d696
- SHA1 2193237dff9a16b7e5375b9e342c2b2b0774f5a8
- SHA512 67d6a493bb92316bce3f42f5589665ac6f7709632e73082e364895fccd9aa8849a769c5b22373ee25625ef79afa9f99918502e9682915880619ffb923898686f
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext