General
- Target SecuriteInfo.com.Win32.Spy.Agent.PRG.23732
- Size 1.7MB
- Sample201109-natb2lsrnx
- SHA256 77b2ce43a1a7363d6c90b9b11fc05220511a868f4f8ca72cd6cbe3219f79fbdd
- MD5 781c4bcf3ac426a19fa7fa605d77ca01
- SHA1 890e9e1b11c2c81bc3df424dc6b860ea4abf7464
- SHA512 0092822d4d4b39799c4aae491222cf441bdabfd2602c5cdb49c7feefe5d8482de0c339f776b90887861c01b0d61a87356f87353c835801ac31f269e875f6347b
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.Spy.Agent.PRG.23732.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.Spy.Agent.PRG.23732.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.Spy.Agent.PRG.23732
- Size 1.7MB
- SHA256 77b2ce43a1a7363d6c90b9b11fc05220511a868f4f8ca72cd6cbe3219f79fbdd
- MD5 781c4bcf3ac426a19fa7fa605d77ca01
- SHA1 890e9e1b11c2c81bc3df424dc6b860ea4abf7464
- SHA512 0092822d4d4b39799c4aae491222cf441bdabfd2602c5cdb49c7feefe5d8482de0c339f776b90887861c01b0d61a87356f87353c835801ac31f269e875f6347b
- MD5 SHA1 SHA512
Score7/10-
Deletes itself
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.