General
-
Target
5e7ac79e96dbe285cba29a6e909c171a.exe
-
Size
267KB
-
Sample
210114-6vvtsn1qse
-
MD5
5e7ac79e96dbe285cba29a6e909c171a
-
SHA1
453ed62045971554723275de992d5f731b6584b1
-
SHA256
4f424343ad7f36fd626de941758aee9c44092d29622f11eb40e4731aada7e10a
-
SHA512
5c010df48af90f829546d826283eb7916f8529987645ea67b723ec329cf90337a50fe759287d2c490814c7dc66dd15edbe03935528448b123e0934e59c405c61
Static task
static1
Behavioral task
behavioral1
Sample
5e7ac79e96dbe285cba29a6e909c171a.exe
Resource
win7v20201028
Malware Config
Targets
-
-
Target
5e7ac79e96dbe285cba29a6e909c171a.exe
-
Size
267KB
-
MD5
5e7ac79e96dbe285cba29a6e909c171a
-
SHA1
453ed62045971554723275de992d5f731b6584b1
-
SHA256
4f424343ad7f36fd626de941758aee9c44092d29622f11eb40e4731aada7e10a
-
SHA512
5c010df48af90f829546d826283eb7916f8529987645ea67b723ec329cf90337a50fe759287d2c490814c7dc66dd15edbe03935528448b123e0934e59c405c61
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-