General
-
Target
PO 07O1_O8_20_01.exe
-
Size
516KB
-
Sample
200709-6tf1be848x
-
MD5
e3018d0d8cf7d0776dacdf35bdcd4693
-
SHA1
8fc37ccbc250a7b8ad9dcf28b921390916faf720
-
SHA256
8f746ab02591cecc45226d28bf483dff6616f697c1d79f8d1daddd5e8ba1d764
-
SHA512
2b483b002b7cca53d7c59665a9107f4695e67b98983aa162433b2b95c60f62e74553047ad174795a53ee97add114a3700aa5cef16afd5745b8a00eb6800b1209
Static task
static1
Behavioral task
behavioral1
Sample
PO 07O1_O8_20_01.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
PO 07O1_O8_20_01.exe
Resource
win10
Malware Config
Targets
-
-
Target
PO 07O1_O8_20_01.exe
-
Size
516KB
-
MD5
e3018d0d8cf7d0776dacdf35bdcd4693
-
SHA1
8fc37ccbc250a7b8ad9dcf28b921390916faf720
-
SHA256
8f746ab02591cecc45226d28bf483dff6616f697c1d79f8d1daddd5e8ba1d764
-
SHA512
2b483b002b7cca53d7c59665a9107f4695e67b98983aa162433b2b95c60f62e74553047ad174795a53ee97add114a3700aa5cef16afd5745b8a00eb6800b1209
Score8/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-