General
- Target xehook197962030370407.zip
- Size 515KB
- Sample240810-dgzejaxamf
- SHA256 13dcc8e21e7ce1aa8ffc421da3e790ae3dcfbe1451f2585f92853e1069f99b9e
Score
9/10
Malware Config
Targets
-
- Target build.exe
- Size 515KB
- SHA256 645df1d69ea713e9f34698e80a0dd4963e7915729658588ba4b0765ffa656536
Score9/10Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
Loads dropped DLL
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Suspicious use of SetThreadContext