Analysis
- max time kernel
5s - max time network
32s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
05/02/2022, 20:09
General
- Target 0479eec2653c0fd5d0a4efc4eca77e5aec7751ee09b8812f673e961d887265dd.exe
- Size 109KB
- Sample220205-yxl5csfbcp
- SHA256 0479eec2653c0fd5d0a4efc4eca77e5aec7751ee09b8812f673e961d887265dd
Score
10/10
Malware Config
Signatures
- 404 Keylogger
Information stealer and keylogger first seen in 2019.
- 404 Keylogger Main Executable 1 IoCs
- Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0479eec2653c0fd5d0a4efc4eca77e5aec7751ee09b8812f673e961d887265dd.exe"C:\Users\Admin\AppData\Local\Temp\0479eec2653c0fd5d0a4efc4eca77e5aec7751ee09b8812f673e961d887265dd.exe"1⤵
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/404-130-0x0000000000EC0000-0x0000000000EE2000-memory.dmp
memory/404-131-0x0000000005EC0000-0x0000000006464000-memory.dmp
memory/404-132-0x0000000005910000-0x00000000059AC000-memory.dmp