Extracted

• • Target

    0ccf1b8ef2cd11685911bbfff920c6a6.exe

  • Size

    772KB

  • MD5

    0ccf1b8ef2cd11685911bbfff920c6a6

  • SHA1

    7893b025a4425d393aa0b81be7b7f1dfb018faaa

  • SHA256

    780db2201a60a16938c09875bbb0c5de57f5262393fc84512c6307c7598d7203

  • SHA512

    f685deab49aecb746f9c62fe1d1503bcc70c4a9713fca9d833916c2d6153f437f3f08f15602e7cca57aaad9a588fc66e5fb29107ea46008de29d8921847a6829

  • SSDEEP

    24576:1Ru16WYdRNDl0Et8uEXE6dl5H92r5HA9NY:LVNDl0Et8uEXE6ds1HA9

  Score

  7^/10

  spywarestealer

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses 2FA software files, possible credential harvesting

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware
  behavioral1behavioral2