General
- Target JCwZyb0zjyDTDj3.exe
- Size 554KB
- Sample200707-hprdc2casn
- SHA256 4302e25b6146e3e0bdf666ae8d3e803ead6b993685a3c4ff3ca98d0b36d7766e
- MD5 fd714befdd56479148dde38f6f788bf1
- SHA1 9decbf37221b47dd3aef363b6cb7a388544bcc87
- SHA512 77062a718fedef9daffbd1b294795603e3731a18ce306fe1065c745ced8cca452efc3cd9cefe50fdbae74a4230ca77958212b9f345ace6982afab9135870eb15
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
JCwZyb0zjyDTDj3.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
JCwZyb0zjyDTDj3.exe
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target JCwZyb0zjyDTDj3.exe
- Size 554KB
- SHA256 4302e25b6146e3e0bdf666ae8d3e803ead6b993685a3c4ff3ca98d0b36d7766e
- MD5 fd714befdd56479148dde38f6f788bf1
- SHA1 9decbf37221b47dd3aef363b6cb7a388544bcc87
- SHA512 77062a718fedef9daffbd1b294795603e3731a18ce306fe1065c745ced8cca452efc3cd9cefe50fdbae74a4230ca77958212b9f345ace6982afab9135870eb15
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext