Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
22/11/2022, 01:25
General
-
Target
6cc3b9a882c2cf3da914b41b60817bfebec801f8495ce523292de33c42b42f40.exe
-
Size
937KB
-
MD5
ceaa909c3e3712e985ee03fca8b8e845
-
SHA1
d7e96790e9e9780d84e3ff347729f9403f2f14b8
-
SHA256
6cc3b9a882c2cf3da914b41b60817bfebec801f8495ce523292de33c42b42f40
-
SHA512
fda81c7e638bed0421fc7e0d681f5e6159cc4e3abaf69ca996473407146bf0b6b6997afa01052613e75ccefffbce2fc221bfe8c70661907cc095750440aa20f2
-
SSDEEP
24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcS3JEh:ybZfGZARViQkA/0TIR3gGvtx8h
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6cc3b9a882c2cf3da914b41b60817bfebec801f8495ce523292de33c42b42f40.exe"C:\Users\Admin\AppData\Local\Temp\6cc3b9a882c2cf3da914b41b60817bfebec801f8495ce523292de33c42b42f40.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx