Analysis
-
max time kernel
124s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
24/06/2022, 08:32
General
-
Target
Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe
-
Size
59KB
-
MD5
0700f3bffdbbf5ecc2a9c63f8b3742a8
-
SHA1
38344723d174f57f736cbc82accbfb632b778f8a
-
SHA256
87fbcaaa029236f3a6b7de6cd8dbbd811804e0b26142c1395b0e9e84f57aaaed
-
SHA512
1a7cb6205cc15d354f89f55e999cdb6c5f609866b417bcabf7437955f4562c994e9bdf0860ce67d6e3999a9771701a670f862d8c3d6f7cef8f743f2be0062b21
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 6 IoCs
-
Drops file in Program Files directory 6 IoCs
-
Drops file in Windows directory 8 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe"C:\Users\Admin\AppData\Local\Temp\Акт сверки №0006851 от 10.06.2022 Номер контракта 6548213218 Основного договора .exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.7MB
-
Filesize
5.7MB