General
- Target Swift Confirmation Copy.exe
- Size 1.1MB
- Sample201217-rw3g23baga
- SHA256 e9bd86ab3129da3447a70bac66feb2f90f7829e5b4595cff15a31a45b1cf82f7
- MD5 95a50c71eb457ea1fa269da79badb0ef
- SHA1 976d296dc042024f9ed695a93b4432714f229322
- SHA512 e36dccdf224bee216b8230473d8fd4af273558f51a9dced8310965764e62ac5d8f264c8209083e9326798e5bf8e2a37d3fedf6aacafaaacc817a2e34f11e5675
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Swift Confirmation Copy.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Swift Confirmation Copy.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target Swift Confirmation Copy.exe
- Size 1.1MB
- SHA256 e9bd86ab3129da3447a70bac66feb2f90f7829e5b4595cff15a31a45b1cf82f7
- MD5 95a50c71eb457ea1fa269da79badb0ef
- SHA1 976d296dc042024f9ed695a93b4432714f229322
- SHA512 e36dccdf224bee216b8230473d8fd4af273558f51a9dced8310965764e62ac5d8f264c8209083e9326798e5bf8e2a37d3fedf6aacafaaacc817a2e34f11e5675
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext