General

  • Target
    b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
  • Size 16KB
  • Sample240613-sf5mgstemf
  • SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Credentials
  • Protocol

    smtp

  • Host

    smtp.frontiernet.net

  • Port

    587

  • Password

    jamespam

Extracted

Credentials
  • Protocol

    smtp

  • Host

    smtp.netzero.com

  • Port

    587

  • Password

    Mqgq9f54nV11

Extracted

Credentials

Extracted

Credentials

Extracted

Credentials

Extracted

Credentials
  • Protocol

    smtp

  • Host

    mx.netcitytw.com

  • Port

    587

  • Password

    Nhjzxhy

Extracted

Credentials

Extracted

Credentials
  • Protocol

    smtp

  • Host

    smtp.nifty.ne.jp

  • Port

    587

  • Password

    akira_pip

Extracted

Credentials
  • Protocol

    smtp

  • Host

    smtp.netzero.net

  • Port

    587

  • Password

    Woolsey6619

Extracted

Credentials

Extracted

Credentials

Targets

    • Target
      b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
    • Size 16KB
    • SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Executes dropped EXE

MITRE ATT&CK Matrix

Tasks