General
- Target 4be59d149de027d7b23aca9a72fecd27c81435f3daec5f00b1d2d5627d29889b
- Size 393KB
- Sample201110-refd3w7m66
- SHA256 4be59d149de027d7b23aca9a72fecd27c81435f3daec5f00b1d2d5627d29889b
- MD5 11d3448ea6dbb9369af7c697702b457c
- SHA1 60969c3f7a2080d36e1e7cf4971021e4a55f724e
- SHA512 41ccee130175aa1c01114e0b3b76f66d96bcb10c65f4708e0ae72573fe230c9b6323d8537b48b02960be69492bafe1cbecf8c0a6eb5edba45b49791744af761c
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
4be59d149de027d7b23aca9a72fecd27c81435f3daec5f00b1d2d5627d29889b.exe
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 4be59d149de027d7b23aca9a72fecd27c81435f3daec5f00b1d2d5627d29889b
- Size 393KB
- SHA256 4be59d149de027d7b23aca9a72fecd27c81435f3daec5f00b1d2d5627d29889b
- MD5 11d3448ea6dbb9369af7c697702b457c
- SHA1 60969c3f7a2080d36e1e7cf4971021e4a55f724e
- SHA512 41ccee130175aa1c01114e0b3b76f66d96bcb10c65f4708e0ae72573fe230c9b6323d8537b48b02960be69492bafe1cbecf8c0a6eb5edba45b49791744af761c
- MD5 SHA1 SHA512
-
Deletes itself
-
Loads dropped DLL
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
JavaScript code in executable