Analysis
-
max time kernel
116s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/04/2023, 10:18
Static task
static1
Behavioral task
behavioral1
Sample
runnerforo.exe
Resource
win7-20230220-en
1 signatures
150 seconds
General
-
Target
runnerforo.exe
-
Size
180KB
-
MD5
52971ee4469d8c6627c9c5e80a5e7886
-
SHA1
90b2f2cf5d93b5dd5a2d1e89dff295ba6a531504
-
SHA256
f43b73e7b8a3f314d38d3cc39129333670b79632861cb0a9a87ad162bf885eba
-
SHA512
eff3a79beb79f55d1f6692765ea6983f418d28e199a95105738883b7ee9a7da02857ef6e9d88487609b631caf3306905c1eba4cdb0753a22a063c29ce180b04a
-
SSDEEP
3072:5d2u3DSb6ERhqxzk428VFYAIvrH6xnh+tZMUndLx5ZQhRCCW2iadTKNYTQ4uY:5sClO8VFYXDaVymhRLWladTKWKY
Malware Config
Signatures
-
Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.