doxing and beaming and ip logger tool[.]exe

Target
doxing and beaming and ip logger tool.exe
Size 4.6MB
Sample240405-std2pafe61
SHA256 e7aa560a8bea5ba549da2f58464e8bda994d4ade6e5890c713527201257b6492
MD5 308e6053518b46518daba0e5561d98b0
SHA1 653e11f2df8727c8d815aaeba421fb60cbe9d68b
SHA512 6e40b78c478572e48c9ba50fcbbf45d460c90e7889a3b3fbf9df6f27c7aca6a30c0e9dea45ea34d6dbd2041b86f778e319519104a5089c94f9c67515273f1b33
SSDEEP 98304:UQf3s64R9ybzUcwti78OqJ7TPBF3ZlHHgkWJ0P39qXSaDvc:RzUcwti7TQlF3ZxxWJSUnDvc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
sample	Nirsoft

NirSoft WebBrowserPassView 1 IoCs

Password recovery tool for various web browsers

resource	yara_rule
sample	WebBrowserPassView

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
doxing and beaming and ip logger tool.exe

File Explorer

doxing and beaming and ip logger tool.exe

.exe 4.6MB

doxing and beaming and ip logger tool.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e7aa560a8bea5ba549da2f58464e8bda994d4ade6e5890c713527201257b6492
MD5 308e6053518b46518daba0e5561d98b0
SHA1 653e11f2df8727c8d815aaeba421fb60cbe9d68b
SHA512 6e40b78c478572e48c9ba50fcbbf45d460c90e7889a3b3fbf9df6f27c7aca6a30c0e9dea45ea34d6dbd2041b86f778e319519104a5089c94f9c67515273f1b33
SSDEEP 98304:UQf3s64R9ybzUcwti78OqJ7TPBF3ZlHHgkWJ0P39qXSaDvc:RzUcwti7TQlF3ZxxWJSUnDvc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Nirsoft
NirSoft WebBrowserPassView

Password recovery tool for various web browsers
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4866058

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

doxing and beaming and ip logger tool.exe

mscoree

dotnet