Extracted

• • Target

    1420f60f053c3ea5605239ee431e5f487245108b1c01be75d16b5246156fa178.exe

  • Size

    1.2MB

  • MD5

    c6813da66eba357d0deaa48c2f7032b8

  • SHA1

    6812e46c51f823ff0b0ee17bfce0af72f857af66

  • SHA256

    1420f60f053c3ea5605239ee431e5f487245108b1c01be75d16b5246156fa178

  • SHA512

    19391c6b12ba8f34a5faf326f8986ef8de4729d614d72bf438c6efa569b3505159ca55f580fe2a02642e5e7a0f1b38a7a9db9f0d66d67ba548d84c230183159e

  • SSDEEP

    24576:IgAMXnXkciEIMJQZe8Us9Mjemp5wx1wach0lhSMXl5xT+d:x3Xn0ciEIp3Us+egSx+ahpxTK

  Score

  7^/10

  collectiondiscoveryspywarestealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2