Extracted

• • Target
    SecuriteInfo.com.Trojan.DownLoaderNET.535.21571.10321.exe
  • Size 11.0MB
  • SHA256 8aec272dd17b671df1658d76d8513ac93124abb7d587979ac585c843d2feeeb6
  • MD5 025b62ae1db0dd6bb2dd12eb445bdfdc
  • SHA1 0ababa52c026cf16cabfdb88d6fe0af33bef01df
  • SHA512 c789d273283e774bcf227bbe4f93f32408cd24abec1eb4698ef6ee23389796d3b4bf03abf3d8faa4e2e2bc7db86c42f322303eaf66166f7297ef3ee69e1477d5
  • SSDEEP 96:kv9Egc6vZGl/GKU92LBqs2V3iRZLCVgu7bDakYkxNezNt/:kvmzR42LBj2VST/u7bjYe4p
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  collectionspywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2