General
- Target 8TZm8e86WgvlQrS.exe
- Size 564KB
- Sample200717-9ft5xglbp2
- SHA256 8210f4c4fedbca54d332df8d9e672cef8a4424695c2ffce581bf526a1537be27
- MD5 c2c49b2ad5f5972fc6d604ccae3de0a2
- SHA1 2c1617ef40947c33f32f4931f2cc78529ac1409c
- SHA512 46ebfe08aaa2ebb5eab4116f4f60b7adfdf5cc4f1096f55a13dccb3a1d30eb6158f4eb3a90f660eb5fa12bd4b1be3abd7cb8375bf303f2491e555036d428d478
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
8TZm8e86WgvlQrS.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
8TZm8e86WgvlQrS.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target 8TZm8e86WgvlQrS.exe
- Size 564KB
- SHA256 8210f4c4fedbca54d332df8d9e672cef8a4424695c2ffce581bf526a1537be27
- MD5 c2c49b2ad5f5972fc6d604ccae3de0a2
- SHA1 2c1617ef40947c33f32f4931f2cc78529ac1409c
- SHA512 46ebfe08aaa2ebb5eab4116f4f60b7adfdf5cc4f1096f55a13dccb3a1d30eb6158f4eb3a90f660eb5fa12bd4b1be3abd7cb8375bf303f2491e555036d428d478
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext