General

  • Target
    0WCLsG8DXRR4L6nx44K2.exe
  • Size 1.2MB
  • Sample210505-sbjgzerjge
  • SHA256 e431da31eb509224ab13458b7f50a92f3a2f41cf01c8014f69f0eaf9339ab9e4
  • MD5 SHA1 SHA512
Score
7/10

Malware Config

Targets

    • Target
      0WCLsG8DXRR4L6nx44K2.exe
    • Size 1.2MB
    • SHA256 e431da31eb509224ab13458b7f50a92f3a2f41cf01c8014f69f0eaf9339ab9e4
    • MD5 SHA1 SHA512
    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks