General
- Target Remittance Reference copy for Confirmation - 20201013.exe
- Size 50KB
- Sample201014-67jgq3xpfe
- SHA256 cd095c19b8c778981def27b002f6db8236991c30a2f7bb4beec6f28f1687c65c
- MD5 9bbe46d9e35928a6b511592ebfe37568
- SHA1 5920835454a7028e0cb67f3b613919fb623e072f
- SHA512 dddbf841764db884e4d01f76b8f507ff6b056977f6dfd9c0e3c65fc5a2a82e17b1f022b76ecaf910f5d2b9f6e77eabc1f52e823d16be12fec6512d2f6ecf822b
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Remittance Reference copy for Confirmation - 20201013.exe
Resource
win7v200722
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Remittance Reference copy for Confirmation - 20201013.exe
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target Remittance Reference copy for Confirmation - 20201013.exe
- Size 50KB
- SHA256 cd095c19b8c778981def27b002f6db8236991c30a2f7bb4beec6f28f1687c65c
- MD5 9bbe46d9e35928a6b511592ebfe37568
- SHA1 5920835454a7028e0cb67f3b613919fb623e072f
- SHA512 dddbf841764db884e4d01f76b8f507ff6b056977f6dfd9c0e3c65fc5a2a82e17b1f022b76ecaf910f5d2b9f6e77eabc1f52e823d16be12fec6512d2f6ecf822b
- MD5 SHA1 SHA512
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext