General
-
Target
17.08.2023-17.08.2023.exe
-
Size
628KB
-
Sample
230817-grv2msfg56
-
MD5
7c5d54bc342da4e546171738769c0334
-
SHA1
ddabffe64af0e7724f83669e4f53bc895e0e201a
-
SHA256
53e446b388b5081f45daa0ee52e07b0b5123f8878148526bad39bc805a20a696
-
SHA512
669ff247b7015a11c142c2482b02d31ff33e030f544492bc6eb74075317d59e558e7180c91a6e7fe664f708554ac580d6ebb035129ad60efd7e09f9543fe432a
-
SSDEEP
12288:oUgNz+Dl+C4kR3GTkFL7HVAQMsdsHGHBUw82q8hUdTXuNqx6LMg6PHCdJf:ZL9GTkZSQBdUw42F62qx6wNPHm
Malware Config
Targets
-
-
Target
17.08.2023-17.08.2023.exe
-
Size
628KB
-
MD5
7c5d54bc342da4e546171738769c0334
-
SHA1
ddabffe64af0e7724f83669e4f53bc895e0e201a
-
SHA256
53e446b388b5081f45daa0ee52e07b0b5123f8878148526bad39bc805a20a696
-
SHA512
669ff247b7015a11c142c2482b02d31ff33e030f544492bc6eb74075317d59e558e7180c91a6e7fe664f708554ac580d6ebb035129ad60efd7e09f9543fe432a
-
SSDEEP
12288:oUgNz+Dl+C4kR3GTkFL7HVAQMsdsHGHBUw82q8hUdTXuNqx6LMg6PHCdJf:ZL9GTkZSQBdUw42F62qx6wNPHm
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-