Analysis
-
max time kernel
105s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
24-05-2022 23:16
Static task
static1
Behavioral task
behavioral1
Sample
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe
Resource
win7-20220414-en
0 signatures
0 seconds
General
-
Target
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe
-
Size
2.1MB
-
MD5
80644402a981f412b628f5be6c6d1989
-
SHA1
3113f36ca818320b178ac6cc33798ac1f4c98cbf
-
SHA256
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861
-
SHA512
beb8d95fcdc1781f5d01c9d1a45b5f2ac44d9f9f2aa9006c4f8a9db3511b06a089014058b7e4aa5310a76e77bc291acdd5f211422bce16ca495b3016c4c64d06
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exepid process 3384 d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe 3384 d8ad3b9d4c0a70c75d02326ce09e9b35f2d570ac4ad13ad5a63313b8ac6a4861.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3384-130-0x0000000010000000-0x00000000100E3000-memory.dmpFilesize
908KB