General
- Target mal20241007-01.rar
- Size 710KB
- Sample241007-ebh12axgna
- SHA256 c862578f76c396997aec18d367b6f0ce81a6e15b6e50e27858e0f3dea7a98d95
Score
8/10
Malware Config
Targets
-
- Target vTHGfiwMDeoOH5a.exe
- Size 785KB
- SHA256 cfad352d8c9e907269c76b22b73f7a9fa47c3782c99ec48598a310a35d3bdaac
Score8/10-
Blocklisted process makes network request
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext