General
- Target BleachBit-6.0.2-setup.exe
- Size 16.7MB
- Sample260806-pjvpxa1akb
- SHA256 16532bc640315f87bd66e04f78b137e1ec90db2d0b7357bfcc47af8873e0076e
Malware Config
Targets
-
- Target BleachBit-6.0.2-setup.exe
- Size 16.7MB
- SHA256 16532bc640315f87bd66e04f78b137e1ec90db2d0b7357bfcc47af8873e0076e
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 760df89c2341f9c39c0250c283cb9caad185244fd6b76e8157cdf49928dc1d8e
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
Score3/10 -
- Target _asyncio.pyd
- Size 31KB
- SHA256 3238682ead4fa4a3412d8237fb9c5c5d7ef2e3532853439f2f3b2abe0ebcc561
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _bz2.pyd
- Size 22KB
- SHA256 b36e4ef32c8f457a85f0669ee659930744dc86725d50b6c9c5a119bd0fca417f
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _ctypes.pyd
- Size 51KB
- SHA256 b7b3e993c4177d00191bea898b5af388f111824214406918f605326c7eade374
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _decimal.pyd
- Size 80KB
- SHA256 440bb8c7c8fe9fd8b0ec98741d548d9b40f7cd59fd468ec632354d7b866652f6
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _elementtree.pyd
- Size 51KB
- SHA256 38704fbce23425525436d46082778df295782d783620bf639742616c23f086c3
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _hashlib.pyd
- Size 27KB
- SHA256 062d46dbb9dc2c43ae18c0c5caca525fb5ab0e409a8261f604a933d7b183890f
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _lzma.pyd
- Size 26KB
- SHA256 595c0f66055aa8c4c9e93b3d024042165929d6336c40fa5c89648477cba88604
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _multiprocessing.pyd
- Size 21KB
- SHA256 b6de1ed8fdc641863e26a881c29908783957edf5291be5ab59a327b6eabee038
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _overlapped.pyd
- Size 26KB
- SHA256 c7e303dce26aea9471989a6d7d7464db5a79f2e778050c3f5a4fd403692c1564
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target _queue.pyd
- Size 21KB
- SHA256 14bdea08b8527653eabc59006d083d8ce60dcaf0c7573dfa349ed124bc57838a
Score5/10-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.