Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
24-05-2022 23:16
Static task
static1
Behavioral task
behavioral1
Sample
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe
-
Size
2.1MB
-
MD5
80644402a981f412b628f5be6c6d1989
-
SHA1
3113f36ca818320b178ac6cc33798ac1f4c98cbf
-
SHA256
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861
-
SHA512
beb8d95fcdc1781f5d01c9d1a45b5f2ac44d9f9f2aa9006c4f8a9db3511b06a089014058b7e4aa5310a76e77bc291acdd5f211422bce16ca495b3016c4c64d06
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exepid process 2040 d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe 2040 d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe