General
- Target c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
- Size 16KB
- Sample240614-ry481avcma
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
Resource
win7-20240611-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
Malware Config
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.nifty.ne.jp
-
Port
587
-
Username
-
Password
1966xxxx
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.nifty.com
-
Port
587
-
Username
-
Password
GENKEN
Extracted
Credentials
-
Protocol
smtp
-
Host
smtp.frontier.com
-
Port
587
-
Username
-
Password
Letsgoeers2u
Targets
-
- Target c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
- Size 16KB
- SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
- MD5 e7d405eec8052898f4d2b0440a6b72c9
- SHA1 58cf7bfcec81faf744682f9479b905feed8e6e68
- SHA512 324507084bd56f7102459efe7b3c2d2560f4e89ed03ec4a38539ebb71bccdf1def7bc961c259f9b02f4b2be0d5e095136c9efcd5fc3108af3dc61d24970d6121
- SSDEEP 192:0cG7C70KVYmEDmSv+ShxlxCB5jNw56NgaaeA8J7CkXhMQzpa:0ZKGmESEH3s5jNIFadAsdXja
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Executes dropped EXE