91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b

Analysis

max time kernel
154s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 05:32

Target

91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe
Size

18KB
MD5

6f02ef5b373593e5d17fa4e868d8c4f0
SHA1

7f33f0ccd5ca8142cdf288e84029714f867d231f
SHA256

91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b
SHA512

3f0d7b5400d3838aa592294ae994d1a5da9b8feb404834ffcb04b5c427af1c6aa2f3a7eb71711e297da18091a723684352eb2b7304fc000f653776242e15b0fe
SSDEEP

192:qkvC07xAAP1k4fMQSaj9yQlnMEkHuln/tdQLw3PrnLD+5C42cN24iqjeaNE:qkvJ7xAAP1k42aByQOlHqhnLoCGw2E

Score

7^/10

spyware stealer

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4540	91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe
4540	91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe
4540	91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe
4540	91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe

C:\Users\Admin\AppData\Local\Temp\91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe
"C:\Users\Admin\AppData\Local\Temp\91dabb8b8ff0ab4230a77d03d4ff710b8b740bc75d1110207bb5a58397fc154b.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4540

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact