General
-
Target
Purchase advice and details.exe
-
Size
663KB
-
Sample
200709-eg5y79grsx
-
MD5
8c49a740ef92731629ce744ca1fece7b
-
SHA1
db2d80f5deba46f40be9357c3576e72aaed73ce5
-
SHA256
aea480ebd5777e840f0b988267554fe1d35f70238bed009231b24475fdc0b0d9
-
SHA512
eb78fcea1a1e5ceb762f620f21cf9e86eac873f1f27a6337e4d41a37396e79bf8bdbe46830e032f899df7d97aeca940d16b70255a4bcfa94430c8b78056c8c35
Static task
static1
Behavioral task
behavioral1
Sample
Purchase advice and details.exe
Resource
win7
Behavioral task
behavioral2
Sample
Purchase advice and details.exe
Resource
win10
Malware Config
Targets
-
-
Target
Purchase advice and details.exe
-
Size
663KB
-
MD5
8c49a740ef92731629ce744ca1fece7b
-
SHA1
db2d80f5deba46f40be9357c3576e72aaed73ce5
-
SHA256
aea480ebd5777e840f0b988267554fe1d35f70238bed009231b24475fdc0b0d9
-
SHA512
eb78fcea1a1e5ceb762f620f21cf9e86eac873f1f27a6337e4d41a37396e79bf8bdbe46830e032f899df7d97aeca940d16b70255a4bcfa94430c8b78056c8c35
-
Deletes itself
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run entry to start application
-
Suspicious use of SetThreadContext
-