Analysis
-
max time kernel
151s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23/11/2022, 23:16
General
-
Target
6355795b28937d37dd171e5c8395784d4b98d2c80e9bc24efb7730100f26f531.exe
-
Size
937KB
-
MD5
9f3683575112314e1738582354e67ac1
-
SHA1
4ada62963517eee386fbb22b68fabd0c8d5b0b6a
-
SHA256
6355795b28937d37dd171e5c8395784d4b98d2c80e9bc24efb7730100f26f531
-
SHA512
bfc5b3f3d290d312227abe32f3df9e4849d33856956aa9a75ce3c5049e9a0342fa207e0e7e353fb3437a037ec985af462b87ea60ac4d6e48fa7477472138fb6a
-
SSDEEP
24576:9cN3hqDCWZhlDpWhX0GXnAcVTaNhE4W8MAiUro/cSN+MT:83ICWZLNWhXBnAcVTao4bEmoYMT
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6355795b28937d37dd171e5c8395784d4b98d2c80e9bc24efb7730100f26f531.exe"C:\Users\Admin\AppData\Local\Temp\6355795b28937d37dd171e5c8395784d4b98d2c80e9bc24efb7730100f26f531.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx