6265b53c6e7da61af042a1bd1a72b588856fa22ac4583fcf897598593be418e4

General

Target
main.exe
Size 37.5MB
Sample260802-pegbqasfke
SHA256 6265b53c6e7da61af042a1bd1a72b588856fa22ac4583fcf897598593be418e4
MD5 3471efa771e8e818bd278c27b9572bb6
SHA1 279ef540600a47b12bb3b489322849cfc603ae70
SHA512 d6a7bd1fb46de56dcbc915ad38e628d703df92fc5cfcc0b6f2b38829b12e1a894e9df3bb1dd3728bc58adf7e1c99dd7e83fb7d685df45c059773331225d4f77c
SSDEEP 786432:6qzbS4ce2s7tjVn58KPwrMUC+nT5T5rH1UtZq5Z4y2aZzj9wt7eS7iwT:6qq4f/555dorMOThxHGDq5Z4nElwNFiW
TLSH
T1568733817B45092BD8992338B5FA8F6753E771660BB28DBE07E10A791DBB1C4CC747A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  main.exe
- Size 37.5MB
- SHA256 6265b53c6e7da61af042a1bd1a72b588856fa22ac4583fcf897598593be418e4
- MD5 3471efa771e8e818bd278c27b9572bb6
- SHA1 279ef540600a47b12bb3b489322849cfc603ae70
- SHA512 d6a7bd1fb46de56dcbc915ad38e628d703df92fc5cfcc0b6f2b38829b12e1a894e9df3bb1dd3728bc58adf7e1c99dd7e83fb7d685df45c059773331225d4f77c
- SSDEEP 786432:6qzbS4ce2s7tjVn58KPwrMUC+nT5T5rH1UtZq5Z4y2aZzj9wt7eS7iwT:6qq4f/555dorMOThxHGDq5Z4nElwNFiW
- TLSH
  T1568733817B45092BD8992338B5FA8F6753E771660BB28DBE07E10A791DBB1C4CC747A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence privilege_escalation spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  main.pyc
- Size 59KB
- SHA256 f3eaf7b053e30f697b8db3723df4d399decc418d37f0fef8e0b29fc6cc29d8a3
- MD5 5463e5aeb1980ba7d91aaef98402046c
- SHA1 89b9055cfb1ce1c76041459b18eade283e7c5a14
- SHA512 8fd5aa29476b661c6c583cd1c1e2fbd94e73958285db0cb20f148f44333123a458af0e26af6b52e18d17ac24d05d574b8cbfdaf2f7b0004297b42c428435ea2e
- SSDEEP 1536:nT34VMTAW8etLWCEV3tMGefEJ4KC/aAum1BNmvb/+urT5:n2MTAWF9ctMFpbpgT5
- TLSH
  T1F4431BB961A06837F9DDF63430E7DD896B12C14236809707F15C9CBABFCD2099E6924E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2