General
- Target b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- Size 16KB
- Sample240613-sf5mgstemf
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.frontiernet.net
-
Port
587
-
Username
-
Password
jamespam
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.netzero.com
-
Port
587
-
Username
-
Password
Mqgq9f54nV11
Extracted
Credentials
-
Protocol
smtp
-
Host
unid.co.kr
-
Port
587
-
Username
-
Password
kang1454
Extracted
Credentials
-
Protocol
smtp
-
Host
hcmp.co.kr
-
Port
587
-
Username
Extracted
Credentials
-
Protocol
smtp
-
Host
hcmp.co.kr
-
Port
587
-
Username
Extracted
Credentials
-
Protocol
smtp
-
Host
mx.netcitytw.com
-
Port
587
-
Username
-
Password
Nhjzxhy
Extracted
Credentials
-
Protocol
smtp
-
Host
hcmp.co.kr
-
Port
587
-
Username
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.nifty.ne.jp
-
Port
587
-
Username
-
Password
akira_pip
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.netzero.net
-
Port
587
-
Username
-
Password
Woolsey6619
Extracted
Credentials
-
Protocol
smtp
-
Host
hcmp.co.kr
-
Port
587
-
Username
Extracted
Credentials
-
Protocol
smtp
-
Host
hcmp.co.kr
-
Port
587
-
Username
Targets
-
- Target b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- Size 16KB
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Executes dropped EXE