Overview

overview

7

Static

static

2df3e770e8...63.exe

windows7-x64

7

2df3e770e8...63.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 01:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2df3e770e882417110b817c578099eed5440726cdc445e75bb83aff54ea3d263.exe

  • Size

    937KB

  • MD5

    4db8269a88b682a6f77452b90950919d

  • SHA1

    c99815ce13eebce5d3e8d1cc5eefb08362e1fe9d

  • SHA256

    2df3e770e882417110b817c578099eed5440726cdc445e75bb83aff54ea3d263

  • SHA512

    4503e71a50b5b81839e6ac3dd5efd4bac75d0c9cb833eb008e4c9e7bb1c800855df9e7def7c483825fae0f24cd1fef95856e289675d0749f22f4d1c7e3823217

  • SSDEEP

    24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSdJEh:ybZfGZARViQkA/0TIR3gGvtx2h

Score
7/10
spywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2df3e770e882417110b817c578099eed5440726cdc445e75bb83aff54ea3d263.exe
    "C:\Users\Admin\AppData\Local\Temp\2df3e770e882417110b817c578099eed5440726cdc445e75bb83aff54ea3d263.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1944-54-0x0000000076D71000-0x0000000076D73000-memory.dmp

    Filesize

    8KB

    Download