General
-
Target
main.file.rtf
-
Size
674KB
-
Sample
201117-schk38mg12
-
MD5
c3de97fcdf698aba7d5649b23366a044
-
SHA1
5c6eb307832259dd76586e0f0c2fdd91941827fb
-
SHA256
d8fbeaf9177f2a6ca86adf59639e0de9daec0a0ce7e3ad9ed9f92cb2e36da537
-
SHA512
30d1764e45eb2d3eab2a2cd8743bc3431583c005ca095c9dd3fcdc69d61d5c915725e05de7c263fb334b4bf152dba7fbd4e3e87dc8cafaa0f226623b3fa47e65
Static task
static1
Behavioral task
behavioral1
Sample
main.file.rtf
Resource
win7v20201028
Malware Config
Targets
-
-
Target
main.file.rtf
-
Size
674KB
-
MD5
c3de97fcdf698aba7d5649b23366a044
-
SHA1
5c6eb307832259dd76586e0f0c2fdd91941827fb
-
SHA256
d8fbeaf9177f2a6ca86adf59639e0de9daec0a0ce7e3ad9ed9f92cb2e36da537
-
SHA512
30d1764e45eb2d3eab2a2cd8743bc3431583c005ca095c9dd3fcdc69d61d5c915725e05de7c263fb334b4bf152dba7fbd4e3e87dc8cafaa0f226623b3fa47e65
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-