General
- Target SecuriteInfo.com.Suspicious.Win32.Save.a.11515.11861
- Size 225KB
- Sample211007-ac7cssbfg3
- SHA256 f880f1bdad4b6022e1ec7de81fdd9276f023dee04c56068698e88db70038886a
- MD5 b76c8a24bb597ad0d10352f0170bf37e
- SHA1 5391a49d2490ad588e69faaac0cb592ebbca0623
- SHA512 78d304727ee83c9db65981ebf6354d72ba8c148ba349825bbf28630dc4b048db7abb79c97a61fb00cbaee68d33e91048f126e15e199e20d94c9caf7bb548200c
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Suspicious.Win32.Save.a.11515.11861.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Suspicious.Win32.Save.a.11515.11861
- Size 225KB
- SHA256 f880f1bdad4b6022e1ec7de81fdd9276f023dee04c56068698e88db70038886a
- MD5 b76c8a24bb597ad0d10352f0170bf37e
- SHA1 5391a49d2490ad588e69faaac0cb592ebbca0623
- SHA512 78d304727ee83c9db65981ebf6354d72ba8c148ba349825bbf28630dc4b048db7abb79c97a61fb00cbaee68d33e91048f126e15e199e20d94c9caf7bb548200c
- MD5 SHA1 SHA512
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.