Extracted

• • Target

    siparis.scr.exe

  • Size

    19KB

  • MD5

    ad425248795f4a50f892fccb867a4c92

  • SHA1

    36f8b1859c23d66f81697f5cab25de4fdbf4729f

  • SHA256

    015ae3f1787e3eaf0f5579da2d847c56d84c650ddd4892af2fc59a8555419526

  • SHA512

    e909fb0abb2f14af598b6123fea9385667d106a6dc9ca797466fc4886e1e62d24d0b9219f73680fe6bb93552eeacf15b71f88932e0fc07a4e59cd1a9a2a1225e

  • SSDEEP

    384:3b3iqZkAfJqCsLVOgCskNAv3r16O1UzVrHLnTEKR4:T3f4CAEakN8oOUJTXm

  Score

  10^/10

  bitratpersistencetrojanxenarmorcollectionpasswordrecoveryspywarestealerupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • XenArmor Suite

    XenArmor is as suite of password recovery tools for various application.

    recoverypasswordxenarmor

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook accounts

    collection

  • Adds Run key to start application

    persistence

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2