General
- Target Swift.exe
- Size 385KB
- Sample200711-lzlwmfetvs
- SHA256 3080bf75b34e9b440154d8f35f7e8c5bd111995869118a093f81b56583f7c03b
- MD5 5a4e899e1f72d8036da67d3840d24a89
- SHA1 138d2f78425306696c78f22d4ee83323f6af7a10
- SHA512 9bd07135e613239c980418e703e4655a6239119dea0373188b0e6847dfe0e034726e1c3274aabe1cda5d855857dd9da08e8614b379fd4de0ab0728c16a270d45
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Swift.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Swift.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target Swift.exe
- Size 385KB
- SHA256 3080bf75b34e9b440154d8f35f7e8c5bd111995869118a093f81b56583f7c03b
- MD5 5a4e899e1f72d8036da67d3840d24a89
- SHA1 138d2f78425306696c78f22d4ee83323f6af7a10
- SHA512 9bd07135e613239c980418e703e4655a6239119dea0373188b0e6847dfe0e034726e1c3274aabe1cda5d855857dd9da08e8614b379fd4de0ab0728c16a270d45
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext