General
- Target Sample 6874.Ref.Scan.exe
- Size 505KB
- Sample200624-eek5d7ap26
- SHA256 54d65e4843d5f69c32e50a76ae8d2efdb15f4113f08c722b6f70c265d2d8e4bf
- MD5 eb1f890af74b91496e18341a1f79cd8d
- SHA1 c9cfbf82dc9cae37e9b2087747ba3ad38970a96c
- SHA512 3a7412058f904e0c33affb108e513ca100384574777eb5c586367ec98200a821204e35bb286a6d19d406a3bee2050c305bc71f5a7b436e3c26dbcc7f63f238bc
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Sample 6874.Ref.Scan.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Sample 6874.Ref.Scan.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target Sample 6874.Ref.Scan.exe
- Size 505KB
- SHA256 54d65e4843d5f69c32e50a76ae8d2efdb15f4113f08c722b6f70c265d2d8e4bf
- MD5 eb1f890af74b91496e18341a1f79cd8d
- SHA1 c9cfbf82dc9cae37e9b2087747ba3ad38970a96c
- SHA512 3a7412058f904e0c33affb108e513ca100384574777eb5c586367ec98200a821204e35bb286a6d19d406a3bee2050c305bc71f5a7b436e3c26dbcc7f63f238bc
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext