General

  • Target

    991f0fff42328856bbcbda3f122d127bd8cad7a649d248b49ebff1f8ed3787c7

  • Size

    1.2MB

  • MD5

    0dce6a452f4a69e7dbb9eb8bcde5dcb5

  • SHA1

    6659b9699285928e525748501f8971248c7a5e22

  • SHA256

    991f0fff42328856bbcbda3f122d127bd8cad7a649d248b49ebff1f8ed3787c7

  • SHA512

    e179d803a8984c300ce10237af4b7f6d2b354f513ebf5abc512503ddac21a664519b399d7945befe76fce3ea166ff049b95cee86ae52465ef9dc579bb11cd804

  • SSDEEP

    24576:0HXNL2PVh6B+BzjmcQZ7V+4s+PtY/XIq3:dBzjcRV+uY/

Score
9/10

Malware Config

Signatures

  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 991f0fff42328856bbcbda3f122d127bd8cad7a649d248b49ebff1f8ed3787c7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections