Extracted

• • Target
    file.exe
  • Size 1.2MB
  • SHA256 b67b83f78ebcc7db4a94ec331ab4daee3bf9f46cc8116c62f15f087c07685d35
  • MD5 c5c013a2adab4975d53ec472b00b93a8
  • SHA1 f193864f6b4fd443eba840a3842d2627294dce87
  • SHA512 e0670e3a6d6854488e32cef988e81549f9bd8611cf3e3ee10196ab5c87f19cbee13a546720debf430907c53f9ae104caedaa57e6eff6e96fd568ec6c1e84c245
  • SSDEEP 24576:UzR0NWv30/UH9Cksn6JCM23gN0YxuB5tczwem3cArXc5:UMV/G9CkhR2YuB5tOwefq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  credential_accessdiscoveryexecutionpersistenceprivilege_escalationspywarestealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer
  behavioral1behavioral2