General

  • Target

    8458cddbadb39ca77e624b8dc5f28db74d14b03f0e573bb97dce2ebd5f2e6f05.exe

  • Size

    100KB

  • MD5

    a878dd0345c3721d93791ab68fcc1faf

  • SHA1

    4982b21603e872f148b8ff1f9336dbd448d6abb5

  • SHA256

    8458cddbadb39ca77e624b8dc5f28db74d14b03f0e573bb97dce2ebd5f2e6f05

  • SHA512

    12900cd5dbf9e3627abc5496e288b8e3c6ef4859c716734382dcc29e819707a46f1b4bc7c569f5d8fff56c6655be0e6930d6926f97f9fa4ec7ccca864876321d

  • SSDEEP

    1536:dkSw2tYZT/E7mKr1awGUpi2joqDm1WHUZ1Kj4I9eF/6n9w2KQf:dk52tYtEyKB5GUDlDdccMU9w2KQf

Score
10/10

Malware Config

Signatures

  • Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8458cddbadb39ca77e624b8dc5f28db74d14b03f0e573bb97dce2ebd5f2e6f05.exe
    .exe windows:4 windows x86 arch:x86

    f62295e96de1ceba9dea2c107634303d


    Headers

    Imports

    Sections