General
-
Target
Payment Advice copy_pdf.exe
-
Size
544KB
-
Sample
200709-pdns2fxm4x
-
MD5
545859d062ee8948beee956c10c7d12a
-
SHA1
fd12d0c8c95b67515d86f7a53ec2ca54cdfd5f67
-
SHA256
f429fb56b7b8f50df583b3bd769ba68f8c89e4b1078d38464362529b7af00391
-
SHA512
c46cf17c215db73002cf18ec1b5dddbc2e6931d66b12f1c2fb87b71bcbc668e62f3853b180f8c3d7384e41d513a5fde6c08ece662087b77b8351cf3ba68e8727
Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice copy_pdf.exe
Resource
win7
Behavioral task
behavioral2
Sample
Payment Advice copy_pdf.exe
Resource
win10v200430
Malware Config
Targets
-
-
Target
Payment Advice copy_pdf.exe
-
Size
544KB
-
MD5
545859d062ee8948beee956c10c7d12a
-
SHA1
fd12d0c8c95b67515d86f7a53ec2ca54cdfd5f67
-
SHA256
f429fb56b7b8f50df583b3bd769ba68f8c89e4b1078d38464362529b7af00391
-
SHA512
c46cf17c215db73002cf18ec1b5dddbc2e6931d66b12f1c2fb87b71bcbc668e62f3853b180f8c3d7384e41d513a5fde6c08ece662087b77b8351cf3ba68e8727
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext
-