General
- Target PURCHASE SPECIFICATIONS FOR PROPOSE ORDER.exe
- Size 734KB
- Sample200707-7zffaybde2
- SHA256 3b0f4ded1d22a750821ae19238a6797a7bacb7b0c60ee2f564d46ad4861ceee8
- MD5 959e9da7ae625d201502726f42287a6a
- SHA1 d4c6f0d7b6a32966e183ee6cab7a8b92e7e443dd
- SHA512 76bc600029c412b55dbfb2de01e1972927c826f460916b410a4e99ae3713acc02c1dd801a1ae2d35a8548b09c951388a6758fc42790dde43ea4cd79f4b7c4ebc
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE SPECIFICATIONS FOR PROPOSE ORDER.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PURCHASE SPECIFICATIONS FOR PROPOSE ORDER.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
samiprinting.com
-
Port
25
-
Username
-
Password
7194066@Rahat
Targets
-
- Target PURCHASE SPECIFICATIONS FOR PROPOSE ORDER.exe
- Size 734KB
- SHA256 3b0f4ded1d22a750821ae19238a6797a7bacb7b0c60ee2f564d46ad4861ceee8
- MD5 959e9da7ae625d201502726f42287a6a
- SHA1 d4c6f0d7b6a32966e183ee6cab7a8b92e7e443dd
- SHA512 76bc600029c412b55dbfb2de01e1972927c826f460916b410a4e99ae3713acc02c1dd801a1ae2d35a8548b09c951388a6758fc42790dde43ea4cd79f4b7c4ebc
- MD5 SHA1 SHA512
Score10/10Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Suspicious use of SetThreadContext