General
-
Target
1bdefd0114b515185c51daf4caba1604
-
Size
55KB
-
Sample
231225-nx1bwafadq
-
MD5
1bdefd0114b515185c51daf4caba1604
-
SHA1
50fa091423265c9f35c42542b50b2aa78a313669
-
SHA256
5c8ce9fb74edfb0cae4e05db7563f38c32ad0c3bbbbed58a7914940915bde164
-
SHA512
51114cdafbdf4918b52dc2099cbf5c9ce3bd0762bb390a24aac918b52a299bffdc88baa4ae1ec44e1abe41de3d012efea3db210a4743519cb78696cc9e4a0b18
-
SSDEEP
1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3VVNFcRbsENDYEQ24:NsDdK4VJ5q0G
Malware Config
Targets
-
-
Target
1bdefd0114b515185c51daf4caba1604
-
Size
55KB
-
MD5
1bdefd0114b515185c51daf4caba1604
-
SHA1
50fa091423265c9f35c42542b50b2aa78a313669
-
SHA256
5c8ce9fb74edfb0cae4e05db7563f38c32ad0c3bbbbed58a7914940915bde164
-
SHA512
51114cdafbdf4918b52dc2099cbf5c9ce3bd0762bb390a24aac918b52a299bffdc88baa4ae1ec44e1abe41de3d012efea3db210a4743519cb78696cc9e4a0b18
-
SSDEEP
1536:NQ56/eLLlTV/mGLfK+P/Rrh0anLF4vqUtrq+CbVj/kI7voN3VVNFcRbsENDYEQ24:NsDdK4VJ5q0G
Score7/10-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-