Extracted

• • Target
    fe788b4069140e15ef9e40e1195ae701db1d7b555e95689767fe3d1c041e5e13.bin
  • Size 38KB
  • SHA256 fe788b4069140e15ef9e40e1195ae701db1d7b555e95689767fe3d1c041e5e13
  • MD5 e29328cd54ee39510997f63038644123
  • SHA1 809adbc20f5ea2fb4dee4da72329f5c4f298c85d
  • SHA512 c3cd9f545daa792f03c7dc4bd808ba56902b0ebb9654f1d31660e6b1ca4f56fde715c4aaa6e1937722a8cfc577e7fc3222603471e1fbddfcbc79f12bb37314dc
  • SSDEEP 768:2FciyXcExN8X8fDtyEFk2fialc32r1LrhIOdlyfSRzXlm4zoRH:2FciyXcExL0EFkmlc3SLj3FRz8woRH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  discoveryupxmaskgram_stealerspywarestealer

  • Detects MaskGramStealer payload

  • MaskGramStealer

    MaskGramStealer is an information stealer.

    stealermaskgram_stealer

  • Maskgram_stealer family

    maskgram_stealer

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2