General
- Target SEND THE QUOTATI...exe
- Size 714KB
- Sample200709-w9selcfxex
- SHA256 0d0be22c9e96a4cd2a2fa90c77240c8cb74748b38ba9b5ee9891329326a21fcc
- MD5 3dc1e73c7d834e1141d1f84a2c15276c
- SHA1 520140b17e6b09f2df2d173236be714957940b06
- SHA512 264de35bacbf555e168383b2fa5bbce559ffaf9ea42138a5729f1dda20b46f94cb0b123d44b2dcfb9d94f1838407ccff3824dc201426be9033439f3f803550ed
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SEND THE QUOTATI...exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SEND THE QUOTATI...exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target SEND THE QUOTATI...exe
- Size 714KB
- SHA256 0d0be22c9e96a4cd2a2fa90c77240c8cb74748b38ba9b5ee9891329326a21fcc
- MD5 3dc1e73c7d834e1141d1f84a2c15276c
- SHA1 520140b17e6b09f2df2d173236be714957940b06
- SHA512 264de35bacbf555e168383b2fa5bbce559ffaf9ea42138a5729f1dda20b46f94cb0b123d44b2dcfb9d94f1838407ccff3824dc201426be9033439f3f803550ed
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run entry to start application
-
Suspicious use of SetThreadContext