General
-
Target
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd.exe
-
Size
2.8MB
-
Sample
200829-ft8bp88fdx
-
MD5
e5ee41b7ce337ff5cc3fd62ddec1567e
-
SHA1
29c6a8ee6f15a4ddac2d972a97fd87d94ee023a3
-
SHA256
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd
-
SHA512
b3af77835c19ae788b80b8337ae3ea0fbeb38fc0df6d56ea9780bfb26837684da09f954f1f94357300e9ac729f0a501a44e61494929bef9b56586f4fa7430494
Static task
static1
Behavioral task
behavioral1
Sample
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd.exe
Resource
win7v200722
Behavioral task
behavioral2
Sample
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd.exe
Resource
win10v200722
Malware Config
Extracted
http://e-service.iag.bg/App_Themes/Efa/clear.txt
Extracted
http://e-service.iag.bg/App_Themes/Efa/video.mp4
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/HELP_DECRYPT_YOUR_FILES
Extracted
C:\Users\Admin\Desktop\HELP_DECRYPT_YOUR_FILES.html
https://t.me/HELP_DECRYPT_YOUR_FILES
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/HELP_DECRYPT_YOUR_FILES
Targets
-
-
Target
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd.exe
-
Size
2.8MB
-
MD5
e5ee41b7ce337ff5cc3fd62ddec1567e
-
SHA1
29c6a8ee6f15a4ddac2d972a97fd87d94ee023a3
-
SHA256
35e8e113150b041416abda4a8d8952ab9dc4ce86f184847220ef0e964e0916fd
-
SHA512
b3af77835c19ae788b80b8337ae3ea0fbeb38fc0df6d56ea9780bfb26837684da09f954f1f94357300e9ac729f0a501a44e61494929bef9b56586f4fa7430494
Score10/10-
Clears Windows event logs
-
Blocklisted process makes network request
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-