General
-
Target
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4
-
Size
1.3MB
-
Sample
210228-2ffpyp5af6
-
MD5
51fd05fa1ff6631a2eb929677e0156e1
-
SHA1
a21e07517c61d11c3bf85768e77981f591fe6f75
-
SHA256
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4
-
SHA512
2cc92cd023295ca62333f5de64d3360800363c690b0f9707e50ffe3d696c2a429a57088f1293eff34b315ce6f7470efbfa870dbc427911bc050b0353fbf06aaa
Static task
static1
Behavioral task
behavioral1
Sample
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4
-
Size
1.3MB
-
MD5
51fd05fa1ff6631a2eb929677e0156e1
-
SHA1
a21e07517c61d11c3bf85768e77981f591fe6f75
-
SHA256
162c90e6e8a1b019ed7272b16b2307cbbdb0bac09acec116fb6c3619c86794c4
-
SHA512
2cc92cd023295ca62333f5de64d3360800363c690b0f9707e50ffe3d696c2a429a57088f1293eff34b315ce6f7470efbfa870dbc427911bc050b0353fbf06aaa
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Drops startup file
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-