Analysis

  • max time kernel
    6s
  • max time network
    11s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    05/02/2022, 16:39

General

  • Target
    3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe
  • Size 109KB
  • Sample220205-t6b9asdfbk
  • SHA256 3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • 404 Keylogger

    Information stealer and keylogger first seen in 2019.

  • 404 Keylogger Main Executable 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe
    "C:\Users\Admin\AppData\Local\Temp\3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:3568

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3568-130-0x0000000000460000-0x0000000000482000-memory.dmp

        memory/3568-131-0x0000000005460000-0x0000000005A04000-memory.dmp

        memory/3568-132-0x0000000004EB0000-0x0000000004F4C000-memory.dmp