Overview

overview

7

Static

static

Performa Invoice.exe

windows7_x64

7

Performa Invoice.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Performa Invoice.exe

  • Size

    394KB

  • Sample

    200709-szrxqvva5n

  • MD5

    834cff3f1c76173eac93288a912a059c

  • SHA1

    830f423e43f076768e368c5f98f2c47c52fc08fa

  • SHA256

    5f9d0a3f1053e6159f628438ac08f66063ad443e44dcbb12dfaf0edbc06ba96b

  • SHA512

    a6e09c1cdfa45926c0d59c5d958fcfce8e48bfb37bd7976b95eda5c4225c7f1990f3e7e8b6dab7ef2249c72dffcca5231cf9da84f53e2afe497d1cf61a7fbfe9

Score
7/10
spyware

Malware Config

Targets

    • Target

      Performa Invoice.exe

    • Size

      394KB

    • MD5

      834cff3f1c76173eac93288a912a059c

    • SHA1

      830f423e43f076768e368c5f98f2c47c52fc08fa

    • SHA256

      5f9d0a3f1053e6159f628438ac08f66063ad443e44dcbb12dfaf0edbc06ba96b

    • SHA512

      a6e09c1cdfa45926c0d59c5d958fcfce8e48bfb37bd7976b95eda5c4225c7f1990f3e7e8b6dab7ef2249c72dffcca5231cf9da84f53e2afe497d1cf61a7fbfe9

    Score
    7/10
    spyware

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks