General
-
Target
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a
-
Size
852KB
-
Sample
221127-pzmdgacg5t
-
MD5
3afd519037aea12086680cc7f10bfcb7
-
SHA1
f4e93c5acfdc47df39b7308aa7fd0cdb9ad3fc8a
-
SHA256
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a
-
SHA512
a881cb8f06460851bdcc2c5dc11f9dcace589a3da0c37e7cc6fc6d922b9c96d325b128f6d88b7bdb93af984eb6238fadebd1bd9332fafe6b1b9a5e832de6c5bc
-
SSDEEP
24576:fwNpc5utRISiYhtNn87WyHTKSTYwiyFBBPfxr:Kp6YRISiY67WyHeSTAyFBBR
Static task
static1
Behavioral task
behavioral1
Sample
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a
-
Size
852KB
-
MD5
3afd519037aea12086680cc7f10bfcb7
-
SHA1
f4e93c5acfdc47df39b7308aa7fd0cdb9ad3fc8a
-
SHA256
4c397f896222d83d538f425e7e7e50119648c31ff65b91306a2191b21513bc1a
-
SHA512
a881cb8f06460851bdcc2c5dc11f9dcace589a3da0c37e7cc6fc6d922b9c96d325b128f6d88b7bdb93af984eb6238fadebd1bd9332fafe6b1b9a5e832de6c5bc
-
SSDEEP
24576:fwNpc5utRISiYhtNn87WyHTKSTYwiyFBBPfxr:Kp6YRISiY67WyHeSTAyFBBR
Score9/10-
NirSoft MailPassView
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
-
Nirsoft
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook accounts
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-