Overview

overview

10

Static

static

10

37931b505f...de.exe

windows7-x64

37931b505f...de.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    37931b505f479aa1f4f72b95f08b31b1beade20db257316378072d98286350de.exe

  • Size

    251KB

  • MD5

    bbbdf29e8ee2fac2aaef0eabd646cf1b

  • SHA1

    77405b1f57cc1e8f65a8155d19a57750d0936d17

  • SHA256

    37931b505f479aa1f4f72b95f08b31b1beade20db257316378072d98286350de

  • SHA512

    12c03de336a32a9d0a85a2ff4b5c7513412849b3a4bff024bdaa36b84fa8d8db6c886034c7e95a31028ea6f9c6598ce68821cd5c33e00fe2342ff85398c68ead

  • SSDEEP

    3072:97UgaJpKBq+YBHSfoHESmfiO4sdZWRDG35xeRX3E:97UgaiBq+YBHSfoHIqOd2GqRn

Score
10/10

Malware Config

Signatures

  • Detect packed .NET executables. Mostly AgentTeslaV4. 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables referencing Windows vault credential objects. Observed in infostealers 1 IoCs
  • Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Detects executables referencing many file transfer clients. Observed in information stealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 37931b505f479aa1f4f72b95f08b31b1beade20db257316378072d98286350de.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections