General
- Target Payment Advice 944095_160720200.exe
- Size 489KB
- Sample200727-e52frcc2px
- SHA256 f8bf7f6c4e21b6ceed18ca103b17005d63fc5b381f944543c347591337c6bab7
- MD5 35afb5994d989b1147e4944c665fa9b2
- SHA1 137ecb867b68731fb60b780db8bf9da02ae9d8dc
- SHA512 1f1ab25e9aa431778ac9c3ec7ba789ff4b21e6018373688c07e3c21c914ad473f3f1e93ef248f935a7fb88443f717707dc400556529f3cb9ad2110aeb1b5df49
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Payment Advice 944095_160720200.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Payment Advice 944095_160720200.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target Payment Advice 944095_160720200.exe
- Size 489KB
- SHA256 f8bf7f6c4e21b6ceed18ca103b17005d63fc5b381f944543c347591337c6bab7
- MD5 35afb5994d989b1147e4944c665fa9b2
- SHA1 137ecb867b68731fb60b780db8bf9da02ae9d8dc
- SHA512 1f1ab25e9aa431778ac9c3ec7ba789ff4b21e6018373688c07e3c21c914ad473f3f1e93ef248f935a7fb88443f717707dc400556529f3cb9ad2110aeb1b5df49
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext