General
-
Target
SEND THE QUOTATI...exe
-
Size
714KB
-
Sample
200709-w9selcfxex
-
MD5
3dc1e73c7d834e1141d1f84a2c15276c
-
SHA1
520140b17e6b09f2df2d173236be714957940b06
-
SHA256
0d0be22c9e96a4cd2a2fa90c77240c8cb74748b38ba9b5ee9891329326a21fcc
-
SHA512
264de35bacbf555e168383b2fa5bbce559ffaf9ea42138a5729f1dda20b46f94cb0b123d44b2dcfb9d94f1838407ccff3824dc201426be9033439f3f803550ed
Static task
static1
Behavioral task
behavioral1
Sample
SEND THE QUOTATI...exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
SEND THE QUOTATI...exe
Resource
win10
Malware Config
Targets
-
-
Target
SEND THE QUOTATI...exe
-
Size
714KB
-
MD5
3dc1e73c7d834e1141d1f84a2c15276c
-
SHA1
520140b17e6b09f2df2d173236be714957940b06
-
SHA256
0d0be22c9e96a4cd2a2fa90c77240c8cb74748b38ba9b5ee9891329326a21fcc
-
SHA512
264de35bacbf555e168383b2fa5bbce559ffaf9ea42138a5729f1dda20b46f94cb0b123d44b2dcfb9d94f1838407ccff3824dc201426be9033439f3f803550ed
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run entry to start application
-
Suspicious use of SetThreadContext
-