General
- Target New Purchase Sample Drawing 2020.exe
- Size 394KB
- Sample200730-tly414m4mn
- SHA256 e97d4cbbbb923b04cee8f87235ad15ab83a7cba51984422cdfdcfefa7e81d457
- MD5 b5b596310b5c18bf814c910eba8bef36
- SHA1 9c5e9b604848d9c8e9bc2dac40ad4ec1a6f94edc
- SHA512 c970f1f038325500ae9bbcaedc838a6d4270f16fc482ebaa01d896db22940af880a773d1b2326707328e6ceb64eec177239208dc6327561715691af37e8c90a4
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
New Purchase Sample Drawing 2020.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
New Purchase Sample Drawing 2020.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target New Purchase Sample Drawing 2020.exe
- Size 394KB
- SHA256 e97d4cbbbb923b04cee8f87235ad15ab83a7cba51984422cdfdcfefa7e81d457
- MD5 b5b596310b5c18bf814c910eba8bef36
- SHA1 9c5e9b604848d9c8e9bc2dac40ad4ec1a6f94edc
- SHA512 c970f1f038325500ae9bbcaedc838a6d4270f16fc482ebaa01d896db22940af880a773d1b2326707328e6ceb64eec177239208dc6327561715691af37e8c90a4
- MD5 SHA1 SHA512
Score7/10-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
JavaScript code in executable
-
Suspicious use of SetThreadContext