General
-
Target
New PO #0164522433 JAN 2021.exe
-
Size
1.1MB
-
Sample
210113-lj8zgx81h2
-
MD5
1cbe8e5ddca661fc3239ffcb3b44b1db
-
SHA1
1cc2dd369304b5ad81113b06cf7f73c75226cc4e
-
SHA256
8ca38b4cf8849e7b7d18cc8afdae915c4dedc2f5aaca4b9a4fd57bdfd5e25a25
-
SHA512
df833315d49687c0910e92c0f0cba2eefde3657d42b5b6ae7ab2929187d9857c4d45dbba9c253897a18c835c69b4dc44a58cb63f4a29757d75f4e893a81ad558
Static task
static1
Behavioral task
behavioral1
Sample
New PO #0164522433 JAN 2021.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
New PO #0164522433 JAN 2021.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
New PO #0164522433 JAN 2021.exe
-
Size
1.1MB
-
MD5
1cbe8e5ddca661fc3239ffcb3b44b1db
-
SHA1
1cc2dd369304b5ad81113b06cf7f73c75226cc4e
-
SHA256
8ca38b4cf8849e7b7d18cc8afdae915c4dedc2f5aaca4b9a4fd57bdfd5e25a25
-
SHA512
df833315d49687c0910e92c0f0cba2eefde3657d42b5b6ae7ab2929187d9857c4d45dbba9c253897a18c835c69b4dc44a58cb63f4a29757d75f4e893a81ad558
Score7/10-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext
-