General
-
Target
907de29be6e943391551fccb1f6a20c8.exe
-
Size
2.8MB
-
Sample
210202-25nbxlr3ee
-
MD5
907de29be6e943391551fccb1f6a20c8
-
SHA1
b4e595b6f7e9ec29e0ee6811cf03ffd3238d8fbb
-
SHA256
1d6f7662f9b034063d694a32d84c538e32da8adb6a52b77eeb3aaec3871b5e47
-
SHA512
3fb7fcc38e724c56b7e9e69a8028f3079ad6d16e67dc91ab9c559519092d734d31b98595c69683c11a48b0159765ae8f3e07e061b81461017acc9e0ce53cae57
Static task
static1
Behavioral task
behavioral1
Sample
907de29be6e943391551fccb1f6a20c8.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
907de29be6e943391551fccb1f6a20c8.exe
Resource
win10v20201028
Malware Config
Extracted
http://185.96.204.96/we_are_anon/vid.mp4
Extracted
http://185.96.204.96/we_are_anon/clear.txt
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/How_Decrypt_Files
Extracted
C:\HELP_DECRYPT_YOUR_FILES.txt
https://t.me/How_Decrypt_Files
Targets
-
-
Target
907de29be6e943391551fccb1f6a20c8.exe
-
Size
2.8MB
-
MD5
907de29be6e943391551fccb1f6a20c8
-
SHA1
b4e595b6f7e9ec29e0ee6811cf03ffd3238d8fbb
-
SHA256
1d6f7662f9b034063d694a32d84c538e32da8adb6a52b77eeb3aaec3871b5e47
-
SHA512
3fb7fcc38e724c56b7e9e69a8028f3079ad6d16e67dc91ab9c559519092d734d31b98595c69683c11a48b0159765ae8f3e07e061b81461017acc9e0ce53cae57
Score10/10-
Clears Windows event logs
-
Blocklisted process makes network request
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
JavaScript code in executable
-