General
-
Target
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42
-
Size
207KB
-
Sample
220427-w77spsggd6
-
MD5
0a6533f28d8fd2c0787b0efd3639f5ed
-
SHA1
4ce9dd199563540da0ed450927e66b46f414e414
-
SHA256
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42
-
SHA512
c38080f0ee9a398252e567e9d9ae87692e0a31e51bd3400972c6b86b68983e15fc0556db97d5c27226ee8b08e0be52c68d600e30fc31cc01a59c32340cd13722
Static task
static1
Behavioral task
behavioral1
Sample
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42
-
Size
207KB
-
MD5
0a6533f28d8fd2c0787b0efd3639f5ed
-
SHA1
4ce9dd199563540da0ed450927e66b46f414e414
-
SHA256
4972624436d63615a384952d200b3a55258a590ccf0c613d9e37e5418e120e42
-
SHA512
c38080f0ee9a398252e567e9d9ae87692e0a31e51bd3400972c6b86b68983e15fc0556db97d5c27226ee8b08e0be52c68d600e30fc31cc01a59c32340cd13722
Score10/10-
suricata: ET MALWARE TSPY_BANKER.IDV/Infostealer.Bancos Module Download
suricata: ET MALWARE TSPY_BANKER.IDV/Infostealer.Bancos Module Download
-
Loads dropped DLL
-
Adds Run key to start application
-
Modifies WinLogon
-
Drops file in System32 directory
-