Overview

overview

10

Static

static

e2dab2f3fd...6c.exe

windows7_x64

10

e2dab2f3fd...6c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2dab2f3fd421cad1bd97b76afd3b63856c81dd2be3ac441e3aecb204ec3bd6c

  • Size

    169KB

  • Sample

    220415-flv9saegan

  • MD5

    a77881f2e21529033b3aac22a0048812

  • SHA1

    f33e435c3eeae4e085d66cddf35b3974b534b237

  • SHA256

    e2dab2f3fd421cad1bd97b76afd3b63856c81dd2be3ac441e3aecb204ec3bd6c

  • SHA512

    d8448319f4f8579279055eaff010c5551f34eb9c44b563b366f0ac1f56007838651df02a83b42b3f9b2860a844750905f909633364d6b15c99785b233909f8a4

Score
10/10
metastealerpoullightstealertrojan

Malware Config

Targets

    • Target

      e2dab2f3fd421cad1bd97b76afd3b63856c81dd2be3ac441e3aecb204ec3bd6c

    • Size

      169KB

    • MD5

      a77881f2e21529033b3aac22a0048812

    • SHA1

      f33e435c3eeae4e085d66cddf35b3974b534b237

    • SHA256

      e2dab2f3fd421cad1bd97b76afd3b63856c81dd2be3ac441e3aecb204ec3bd6c

    • SHA512

      d8448319f4f8579279055eaff010c5551f34eb9c44b563b366f0ac1f56007838651df02a83b42b3f9b2860a844750905f909633364d6b15c99785b233909f8a4

    Score
    10/10
    poullightstealertrojanmetastealer

    • Meta Stealer Stealer

      Meta Stealer steals passwords stored in browsers, written in C++.

      stealermetastealer

    • Poullight

      Poullight is an information stealer first seen in March 2020.

      trojanstealerpoullight

    • Poullight Stealer Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks