General
-
Target
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5
-
Size
4.8MB
-
Sample
210130-5mjcamy55n
-
MD5
013eba0050ebe18e39978e89a56c0fab
-
SHA1
85ef7c03d70e2cc7095550ce15f140e78d05f3ad
-
SHA256
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5
-
SHA512
159a723e036b86996f715c460756a047436396dc20afd1a62715c734be5ab0fdc6c213fe492201142f695bf33396a49ee34010b3a9c52751b527270a2cd6af05
Static task
static1
Behavioral task
behavioral1
Sample
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5
-
Size
4.8MB
-
MD5
013eba0050ebe18e39978e89a56c0fab
-
SHA1
85ef7c03d70e2cc7095550ce15f140e78d05f3ad
-
SHA256
5fa60303a0c4fd13ecd69e7c1a17788b72605473c2fb3f93eb758010326c76e5
-
SHA512
159a723e036b86996f715c460756a047436396dc20afd1a62715c734be5ab0fdc6c213fe492201142f695bf33396a49ee34010b3a9c52751b527270a2cd6af05
Score9/10-
Nirsoft
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-