General

  • Target

    mailpv.exe

  • Size

    354KB

  • MD5

    0ceb38f7c3d464a8268f67559755b216

  • SHA1

    793e43699602c78105abd265fbbb00a4cfe03755

  • SHA256

    bc7bd27e94e24a301edb3d3e7fad982225ac59430fc476bda4e1459faa1c1647

  • SHA512

    8b272403a174972ddd10b0fe83c2d766f8bc292b4f1aa4ce6e5ef50b4bfcc7c6082e7e3af6a2c0a2a14eef43bb6feb398186244c59151bccda6579ee469b91e9

  • SSDEEP

    6144:xImGyIPaWmBzyORQC0w9MuM/SDdpHk0z7fk8D0vyuvgypYK0C0x9e:xImGFPmEORLN+SDHEYfkS0v7vP2K0T9e

Score
10/10

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mailpv.exe
    .exe windows:5 windows x86

    edbebcb3d81b9962644fd5d7ba42a971


    Headers

    Imports

    Sections