Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
25/12/2023, 22:33
General
-
Target
Mail PassView 1.42/mailpv.exe
-
Size
46KB
-
MD5
6f2c09baafc0d31f1ce0994f8f2d5048
-
SHA1
84573202cf87bbc995bb43be4b5cb41434aab059
-
SHA256
3098abdb835e9b266dad36173c20572edc44cd21501607622eb548787b3d54f5
-
SHA512
74bc6ab413d493d5210f7e7980bf2a020c3fed2fd2bafdb6563d041840550410db68bdf267576cacc5bc677f490f8d9189148ea87301777b56a9dd4ef1d749ae
-
SSDEEP
768:x+a+3IlCRVJR1w8bV3QEl91Zeqd0xb9SItNrXjGlFVzGJ0hC1mT6pOGUxuok:chnw8l1bY9SQba80X6uk
Score
9/10
Malware Config
Signatures
-
NirSoft MailPassView 1 IoCs
Password recovery tool for various email clients
-
Nirsoft 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Accesses Microsoft Outlook accounts 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Mail PassView 1.42\mailpv.exe"C:\Users\Admin\AppData\Local\Temp\Mail PassView 1.42\mailpv.exe"1⤵
- Accesses Microsoft Outlook accounts
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
116KB