Overview

overview

10

Static

static

10

i965652f-m...ta.exe

windows7-x64

1

i965652f-m...ta.exe

windows10-2004-x64

7

i965652f-main/e.ps1

windows7-x64

3

i965652f-main/e.ps1

windows10-2004-x64

3

i965652f-m...de.ps1

windows7-x64

3

i965652f-m...de.ps1

windows10-2004-x64

8

i965652f-m...le.bat

windows7-x64

8

i965652f-m...le.bat

windows10-2004-x64

8

i965652f-m...ab.ps1

windows7-x64

3

i965652f-m...ab.ps1

windows10-2004-x64

8

i965652f-main/m.ps1

windows7-x64

8

i965652f-main/m.ps1

windows10-2004-x64

8

i965652f-m...st.vbs

windows7-x64

3

i965652f-m...st.vbs

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    i965652f-main.zip

  • Size

    8.2MB

  • MD5

    be180e9117f8bd450654fd3dd237e555

  • SHA1

    e511d90fdf15492f57ada7866f633296f97d5b7b

  • SHA256

    9d6b004b06d43ac61aaf4c368987f2c6eef854c6f32cf5286666520ef213f2b7

  • SHA512

    faba17ca452b8233deea041638112e646a378fafbbd524c8563cccaa649a6ff39afa46cc1ba60e816a37b11fe25e3e28622b6cc808185db5d17ae19efd9b9aaf

  • SSDEEP

    196608:FGJ/PaNXBNjj2YmlXaB+GGWDKHQyVEUSydq:FGJ/PaNnH2YKXaUcys8q

Score
10/10
hackbrowserdata

Malware Config

Signatures

  • An open source browser data exporter written in golang. 1 IoCs
  • Hackbrowserdata family
    hackbrowserdata
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i965652f-main.zip
    .zip
  • i965652f-main/bdata.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • i965652f-main/e.ps1
  • i965652f-main/exclude.ps1
    .ps1
  • i965652f-main/file.bat
  • i965652f-main/grab.ps1
    .ps1
  • i965652f-main/m.ps1
    .ps1
  • i965652f-main/svhost.vbs
    .vbs