Analysis
-
max time kernel
148s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
24-06-2022 08:32
General
-
Target
Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe
-
Size
59KB
-
MD5
0700f3bffdbbf5ecc2a9c63f8b3742a8
-
SHA1
38344723d174f57f736cbc82accbfb632b778f8a
-
SHA256
87fbcaaa029236f3a6b7de6cd8dbbd811804e0b26142c1395b0e9e84f57aaaed
-
SHA512
1a7cb6205cc15d354f89f55e999cdb6c5f609866b417bcabf7437955f4562c994e9bdf0860ce67d6e3999a9771701a670f862d8c3d6f7cef8f743f2be0062b21
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in Program Files directory 14 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe"C:\Users\Admin\AppData\Local\Temp\Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe"1⤵
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/908-54-0x00000000756A1000-0x00000000756A3000-memory.dmpFilesize
8KB
-
memory/908-55-0x0000000074A50000-0x0000000074FFB000-memory.dmpFilesize
5.7MB
-
memory/908-56-0x0000000074A50000-0x0000000074FFB000-memory.dmpFilesize
5.7MB