General
- Target EE09TR0098654.exe
- Size 772KB
- Sample201213-bhym28patj
- SHA256 cece846f69234defbd561899682dd1f687b8ed35ef5081a8a4cd3d7d8cbc7fe5
- MD5 4663cc332bb0a35d7fc8e95da82c13ec
- SHA1 cb533ff7adc238e226421821342a1a89e4e7e1ee
- SHA512 2874f13154bad136acc082e2c6c8858105ce804b5b77c98ab023aa4b684610c478a42090038146a749105468451c3e65baa9fc27554acd0d91909d861b6f4054
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
EE09TR0098654.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
EE09TR0098654.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target EE09TR0098654.exe
- Size 772KB
- SHA256 cece846f69234defbd561899682dd1f687b8ed35ef5081a8a4cd3d7d8cbc7fe5
- MD5 4663cc332bb0a35d7fc8e95da82c13ec
- SHA1 cb533ff7adc238e226421821342a1a89e4e7e1ee
- SHA512 2874f13154bad136acc082e2c6c8858105ce804b5b77c98ab023aa4b684610c478a42090038146a749105468451c3e65baa9fc27554acd0d91909d861b6f4054
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext