General

  • Target

    54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe

  • Size

    399KB

  • MD5

    45fd9224d365376207bc0d6a562cf39e

  • SHA1

    4454eb8eed1b6a0c15873b60bbf8dd09dcb10e6c

  • SHA256

    54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675

  • SHA512

    a4f9616285249f821714ac40b6188400624922384aee990535ee29b9ed61ffef67ddc5533f6c4a10cc76fdcac790b5bc613638ba5f3a479e108cbe46982ee683

  • SSDEEP

    6144:wjfeAkLUmv95G6HzHtZmIYEaWBx36V0JQQQma6QszRUQzUKyerReCVrK/EtbSbI+:wjfnkjv26TNZmFq36+xa6QS1tR8Iyn2

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Detects executables manipulated with Fody 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections