General
- Target SOA_#BA520865 MAR20.exe
- Size 490KB
- Sample200629-he25ekw2we
- SHA256 3fd17183d9972166dd9fa8622e7e464d3de1bbd1dc74589cd877aba8c7d72895
- MD5 52a1614a4b6d163faec81d043f364226
- SHA1 ea6bbaa4ec558af26a2b52122020fd8937956558
- SHA512 79a4d57853a07995c6c7398e3f422f4563db02e94c1c2986e89110c180e4dd79d223632dcd39196d27b693b7d3522f1e9e9aa882927c82c563527f53a2074572
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SOA_#BA520865 MAR20.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SOA_#BA520865 MAR20.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target SOA_#BA520865 MAR20.exe
- Size 490KB
- SHA256 3fd17183d9972166dd9fa8622e7e464d3de1bbd1dc74589cd877aba8c7d72895
- MD5 52a1614a4b6d163faec81d043f364226
- SHA1 ea6bbaa4ec558af26a2b52122020fd8937956558
- SHA512 79a4d57853a07995c6c7398e3f422f4563db02e94c1c2986e89110c180e4dd79d223632dcd39196d27b693b7d3522f1e9e9aa882927c82c563527f53a2074572
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext