Extracted

• • Target

    47e7322c2ff85274fed0726ef42f3b7be3f7a62466e76ad05126767151024306.exe

  • Size

    206KB

  • MD5

    2dece3353cda5321fff7c92a697c37ee

  • SHA1

    93b6be2ea8097c6c09785bb71b9e7286083034b7

  • SHA256

    47e7322c2ff85274fed0726ef42f3b7be3f7a62466e76ad05126767151024306

  • SHA512

    dc24f46640765c775271d0432028890973826159d0543c3ad6cd97dfeb62dd84c650887a62aa966106f38dcaaeca6dc64d2a4083b21ff62390d77a04022d9730

  • SSDEEP

    3072:aTQm3axZbvWtCyEwVt2IUE5iujhGzCLEolreNsagz6p9ufGol:HmqHbv+EwiIf5ykEollMufG

  Score

  8^/10

  discoveryspywarestealer

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2