Extracted

• • Target
    file.exe
  • Size 1.2MB
  • SHA256 8a214a1d5c7767e5018737f6961886f2bb621f12af5dff34d3de145ae2b103c9
  • MD5 2ad2c9a36050cf100d5810ffff6ebbb8
  • SHA1 500ded5f47854bc35ca6f50bf514e15919a1b0b3
  • SHA512 594e80526c6725212ddb0270c31bee86e243d9951f9456ccb79e1cc18950618a04ad87faddd286691413c4fe433011a6c28d923bdb0ad8ca08a45bbe1c66540b
  • SSDEEP 24576:OrR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRgHOnW:OkHmiyCkhh2Bamituw+U6V
  • TLSH
    T127557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE310
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  credential_accessdiscoveryexecutionpersistenceprivilege_escalationspywarestealer

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer
  behavioral1behavioral2