Extracted

• • Target

    3f7b577f662c169fe766cdf2cf8c433fd19659355b5a6320a89e8068bee10efa.exe

  • Size

    107KB

  • MD5

    6d6a1c83920db242c501badf530e0673

  • SHA1

    e081d43e2602e9cf61a128e51c6a69593a4fc466

  • SHA256

    3f7b577f662c169fe766cdf2cf8c433fd19659355b5a6320a89e8068bee10efa

  • SHA512

    b3161c308b69c46fd28e43f0d94cb436acf56299f33705c3357b9b84cfc06464bb9b53a9094e2149f792b114b6332fcb60e0119f5bebb9c5ffc0008c3f9c1f9b

  • SSDEEP

    1536:Bpaiq0I2XvL/5kVvpyITHAOEH8pIZ+msXvsfJre8oJ1C7uj9m:BpaikE/5SppIZ+m2sfJrebJF

  Score

  8^/10

  discoveryspywarestealer

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2