Overview

overview

7

Static

static

New QUOTATION.exe

windows7_x64

7

New QUOTATION.exe

windows10_x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    New QUOTATION.exe

  • Size

    723KB

  • Sample

    200708-41x8m7737n

  • MD5

    3162b1cabee9fd3d873f5db5f189bc08

  • SHA1

    041ad07777f7da39d8f75ebef505497729b474ca

  • SHA256

    e6d6cda38ec798c76fb5727c7af199c496408484c68f3d7c0d34d6be09900ca0

  • SHA512

    1e2267ff9fb8a927d92f0c169653d0bbe626bdf39c085bca56c6ac507143446ea0b42a518e6a080a0a3d0bbc5d21930636e084fe5f79254a3ce29fa9535e72b7

Score
7/10
spyware

Malware Config

Targets

    • Target

      New QUOTATION.exe

    • Size

      723KB

    • MD5

      3162b1cabee9fd3d873f5db5f189bc08

    • SHA1

      041ad07777f7da39d8f75ebef505497729b474ca

    • SHA256

      e6d6cda38ec798c76fb5727c7af199c496408484c68f3d7c0d34d6be09900ca0

    • SHA512

      1e2267ff9fb8a927d92f0c169653d0bbe626bdf39c085bca56c6ac507143446ea0b42a518e6a080a0a3d0bbc5d21930636e084fe5f79254a3ce29fa9535e72b7

    Score
    7/10
    spyware

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks