General
- Target SecuriteInfo.com.Trojan.PWS.StealerNET.75.14582.8291.exe
- Size 407KB
- Sample260813-qqxnhsbc54
- SHA256 e11f3af65a8ff295858d81d135d49aadb0a157b48b7daffdc34c0c921a29d5ca
- MD5 338b9323be86fe1ab35c5a5d4c3d5f5c
- SHA1 63986bf10c2ba56d0f2d3a70b7ccc58121e72b78
- SHA512 5c51f258ba174e43cba5fef22eed56f8e10926858275eac062f55e181545e21f84bd794378f334a4970fe3a04093de6a5955d44bce7aa18026e41847582a8677
- SSDEEP 6144:HTJ9f7/yGi5aeHXUJKYUh0NbXbSOklURAdcz:HTJ9zaGnycKrO3k
- TLSH T13594E52873F88A09F2FF6FB5A8B049118A32F84B9D35D74E1988509D0DB2B91DD50B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.PWS.StealerNET.75.14582.8291.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.PWS.StealerNET.75.14582.8291.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Trojan.PWS.StealerNET.75.14582.8291.exe
- Size 407KB
- SHA256 e11f3af65a8ff295858d81d135d49aadb0a157b48b7daffdc34c0c921a29d5ca
- MD5 338b9323be86fe1ab35c5a5d4c3d5f5c
- SHA1 63986bf10c2ba56d0f2d3a70b7ccc58121e72b78
- SHA512 5c51f258ba174e43cba5fef22eed56f8e10926858275eac062f55e181545e21f84bd794378f334a4970fe3a04093de6a5955d44bce7aa18026e41847582a8677
- SSDEEP 6144:HTJ9f7/yGi5aeHXUJKYUh0NbXbSOklURAdcz:HTJ9zaGnycKrO3k
- TLSH T13594E52873F88A09F2FF6FB5A8B049118A32F84B9D35D74E1988509D0DB2B91DD50B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1