Extracted

• • Target
    dvnx_e5b790c3_unpacked.exe
  • Size 617KB
  • SHA256 8351041a32a2c892ab9349120616870b5095d05752f4d3e355d8158c2bc02cbd
  • MD5 455b03cc8c12e32499877f00b9146e3b
  • SHA1 2dcf41701a5819a318491e8420d63b36021328ce
  • SHA512 25e6925af85bc9e4d2e5423996176a8aea5ad98c8b35c30606795e1da0ebd167a5cdd97dbf04bee15e7ef34d8df72c51603f3946c264f5daf35d24902aa573ee
  • SSDEEP 12288:zA+D8cAENGp94gfRUDJpFFB0k3CPC1B+Hu5Lpbg5Wtj9iPqK:zAwhGggCJpFok3CPZu5LXdyqK
  • TLSH
    T1ACD44B53F3A146DCD42AC9B5832A9133E6757C8C4630B67B67946F211F3ABA0EB2D704
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryspywarestealerexecution

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2