Extracted

• • Target

    7ba61f3706d900ad4fdf101227727b88ed4da64147d1bdea8b2e9d88e3e73b15.exe

  • Size

    1.2MB

  • MD5

    1a2e3cefb9b08af38db92cab7264f6b3

  • SHA1

    e31ab02e4a2cfb5dfbc8bc33c6e392bcb03c2bc3

  • SHA256

    7ba61f3706d900ad4fdf101227727b88ed4da64147d1bdea8b2e9d88e3e73b15

  • SHA512

    4ff510a5530227b35d5cdc5efc3fdb8c6531c1a785519379175fd9fc167f20a9f9444f419cedde3a2215cf0836025357e363315b8422d7d198a7f96727671a16

  • SSDEEP

    24576:l5Uah/dTnglhmsqrKPYS1gm7K87h0lhSMXl1vN:nUaldTUcsqaYwh/Kl1

  Score

  7^/10

  collectiondiscoveryspywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2