Overview

overview

7

Static

static

Ref-MT103-...20.exe

windows7_x64

7

Ref-MT103-...20.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ref-MT103-Payment-Priority-Customer-Ref-Ref-CCB99002992220420.exe

  • Size

    436KB

  • Sample

    200710-mt8m5rr6sx

  • MD5

    0cfa35908c083fbddd34ebaa1d60f20b

  • SHA1

    0c0a222a52a9449e6e9d99c54388fd971a2c7d6d

  • SHA256

    35c0476b27e9127294bbe36927dd65d266405555540bf310c85b97954e895779

  • SHA512

    c64557148ce7da63b581bb2c6bd6c6ca6ef5bdbc655fd5df30c54e85d17835502e499877afc945e2092b8faf66322306236450fc0a025a1e184775196445cc2f

Score
7/10
spyware

Malware Config

Targets

    • Target

      Ref-MT103-Payment-Priority-Customer-Ref-Ref-CCB99002992220420.exe

    • Size

      436KB

    • MD5

      0cfa35908c083fbddd34ebaa1d60f20b

    • SHA1

      0c0a222a52a9449e6e9d99c54388fd971a2c7d6d

    • SHA256

      35c0476b27e9127294bbe36927dd65d266405555540bf310c85b97954e895779

    • SHA512

      c64557148ce7da63b581bb2c6bd6c6ca6ef5bdbc655fd5df30c54e85d17835502e499877afc945e2092b8faf66322306236450fc0a025a1e184775196445cc2f

    Score
    7/10
    spyware

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spyware

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks