Extracted

• • Target

    fecfdf7229531ca96839fdaa44d0c28b.exe

  • Size

    1.2MB

  • MD5

    fecfdf7229531ca96839fdaa44d0c28b

  • SHA1

    17de35617a0898612971c450a54418a200b4f5ab

  • SHA256

    d510497588fe468e45119bf8a094b1be3a9eb2e78e26ddfdc1466911bab8b629

  • SHA512

    fbc8e001a6c875f741cc05fd87e402cf06dcba8ec7ef8b1a91ff1955d67a87e43a2021331b316b3a73c476db08595a05b28c65dcbdfe46c4d8f5d7f69826c1f9

  • SSDEEP

    24576:gKRjZgSemwfAtN+qKCpx9Pm7ort8JLuo/AehkSmDuBfUh0lhSMXlwGd:gAgSemw8N+qKC1eiCJLuoJh10uXb

  Score

  7^/10

  collectiondiscoveryspywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2