General
- Target New supplier Inquiry and PO 080720501_ DOC.exe
- Size 318KB
- Sample200820-e3gmzlsxlx
- SHA256 6abef497f9ed98985aba0400a345084440567aa3a8a465041fe8bff27f99c787
Score
7/10
Malware Config
Targets
-
- Target New supplier Inquiry and PO 080720501_ DOC.exe
- Size 318KB
- SHA256 6abef497f9ed98985aba0400a345084440567aa3a8a465041fe8bff27f99c787
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext