General
- Target SecuriteInfo.com.BackDoor.SpyBotNET.25.11232.8359
- Size 307KB
- Sample200926-w9mmjeadds
- SHA256 e7adb9ddc612bc2bbc52cc809b0a7b90c6f28f0b9df4fa767dccdab4d1d91c50
- MD5 a8d603ac6b8619693fef95d4546bd0cc
- SHA1 c6e6990439ca7e3f4afa8ceb314069d076a3c568
- SHA512 d550ca8cc451e03e30160aa9ac0cd6f582b8f2a8aee08a09163a5185a542fe29fab9c2acaac640eb1d67896d4f3851a4dbafa324f496659be4fa6387b064acdf
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BackDoor.SpyBotNET.25.11232.8359.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BackDoor.SpyBotNET.25.11232.8359.exe
Resource
win10v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.BackDoor.SpyBotNET.25.11232.8359
- Size 307KB
- SHA256 e7adb9ddc612bc2bbc52cc809b0a7b90c6f28f0b9df4fa767dccdab4d1d91c50
- MD5 a8d603ac6b8619693fef95d4546bd0cc
- SHA1 c6e6990439ca7e3f4afa8ceb314069d076a3c568
- SHA512 d550ca8cc451e03e30160aa9ac0cd6f582b8f2a8aee08a09163a5185a542fe29fab9c2acaac640eb1d67896d4f3851a4dbafa324f496659be4fa6387b064acdf
- MD5 SHA1 SHA512
Score8/10Executes dropped EXE
Loads dropped DLL
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
Suspicious use of SetThreadContext