General
-
Target
3dd76881816389df4151723afe6f30d4
-
Size
493KB
-
Sample
201117-zdpmxv1hca
-
MD5
93c9f1177126d2b7a9a9ef2db8baabbf
-
SHA1
8a355d27b6f3705717e744c7c9f21b3e1eb4ed51
-
SHA256
e8c9b9b8311d2ef44f7da7e26fe7c68978bdbdb17d3180053a31c14617699fe4
-
SHA512
5bfafb96afd0fd8efb939b44a42838cdb19e8ba9d3f6546fb8d1bbff2229c4169e13661f992135a4a87256df6f57ee95596802fedf9dcafce85f60865d264a27
Static task
static1
Behavioral task
behavioral1
Sample
3dd76881816389df4151723afe6f30d4.exe
Resource
win7v20201028
Malware Config
Targets
-
-
Target
3dd76881816389df4151723afe6f30d4
-
Size
493KB
-
MD5
93c9f1177126d2b7a9a9ef2db8baabbf
-
SHA1
8a355d27b6f3705717e744c7c9f21b3e1eb4ed51
-
SHA256
e8c9b9b8311d2ef44f7da7e26fe7c68978bdbdb17d3180053a31c14617699fe4
-
SHA512
5bfafb96afd0fd8efb939b44a42838cdb19e8ba9d3f6546fb8d1bbff2229c4169e13661f992135a4a87256df6f57ee95596802fedf9dcafce85f60865d264a27
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-