Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 01:03

General

  • Target

    d499a0a50e04dabe915d962317b58cfe0593ce5536a7b807ad15677a8ca9d923.exe

  • Size

    937KB

  • MD5

    00482586a90472dae199ab9a4e85fa81

  • SHA1

    2f261c0586eeef698de9b0dc1ae2f565f7edbf95

  • SHA256

    d499a0a50e04dabe915d962317b58cfe0593ce5536a7b807ad15677a8ca9d923

  • SHA512

    8e9f01bd66fdcd9777fbff10871ed368d0891b30fbea1eb935e409f2facc082f8e38dec38c9e3de9925352e3c4366ecccfd706f7361bf022115884a97dd3c874

  • SSDEEP

    24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcStJEh:ybZfGZARViQkA/0TIR3gGvtxuh

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d499a0a50e04dabe915d962317b58cfe0593ce5536a7b807ad15677a8ca9d923.exe
    "C:\Users\Admin\AppData\Local\Temp\d499a0a50e04dabe915d962317b58cfe0593ce5536a7b807ad15677a8ca9d923.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1044

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1044-54-0x0000000075501000-0x0000000075503000-memory.dmp

          Filesize

          8KB