Analysis
-
max time kernel
135s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04/10/2022, 07:46
General
-
Target
1d1f8d0a793fa868f7cad39c98ca5970839c6d8bcc9fea2544c2befe8a85d553.exe
-
Size
276KB
-
MD5
14eaac43199d95aca2a26473db17b3ca
-
SHA1
b75b772f710971d1bbb200a795dab4755c72bbcc
-
SHA256
1d1f8d0a793fa868f7cad39c98ca5970839c6d8bcc9fea2544c2befe8a85d553
-
SHA512
602c9ec5ccef7377e5a886b6f6b7b5cb4dfa7b319c7d24316cc3331ad9957b05abb30f90526cd6d9e10d513faa2839b13021b122642f97a93b32ed252d3ff743
-
SSDEEP
6144:xp93v4NANbBlxRlN5H+E9XAU7PBG0onUcOqo1mf0QsunZGOJuYi:d4w9eEOeBGqHqhfJvJW
Score
7/10
Malware Config
Signatures
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients 2 TTPs
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d1f8d0a793fa868f7cad39c98ca5970839c6d8bcc9fea2544c2befe8a85d553.exe"C:\Users\Admin\AppData\Local\Temp\1d1f8d0a793fa868f7cad39c98ca5970839c6d8bcc9fea2544c2befe8a85d553.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
460KB
-
Filesize
460KB