General
-
Target
overdue invoice.pdf...exe
-
Size
539KB
-
Sample
200716-8e7n46tvba
-
MD5
fa0c9ce3695691566ec8fbba088433c6
-
SHA1
1b5693cbe7521087c8bb5b46a8706edb71b037a4
-
SHA256
93c807a2fb8dff5a30d9f860f1eb98304d8303f8fff4c53c98870201d6d3eb68
-
SHA512
b3bb49000f13d18163d685905384b7acbca9b165cc009b53830c7f567b5c9f762fb6c6d1c08036db774265c1048d3e62b6ca198253a37a8a5a19adcffac4c57a
Static task
static1
Behavioral task
behavioral1
Sample
overdue invoice.pdf...exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
overdue invoice.pdf...exe
Resource
win10
Malware Config
Targets
-
-
Target
overdue invoice.pdf...exe
-
Size
539KB
-
MD5
fa0c9ce3695691566ec8fbba088433c6
-
SHA1
1b5693cbe7521087c8bb5b46a8706edb71b037a4
-
SHA256
93c807a2fb8dff5a30d9f860f1eb98304d8303f8fff4c53c98870201d6d3eb68
-
SHA512
b3bb49000f13d18163d685905384b7acbca9b165cc009b53830c7f567b5c9f762fb6c6d1c08036db774265c1048d3e62b6ca198253a37a8a5a19adcffac4c57a
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-