Analysis
-
max time kernel
200s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 11:27
General
-
Target
17bcdd525b7a68fa85cb4457e810f8da57c7696c922a367eb1ccbd78893e70ec.exe
-
Size
933KB
-
MD5
f470f8f186481b462e1100c6f7552da7
-
SHA1
e0eaf26cfb5f53779717832639ef13d37c795df8
-
SHA256
17bcdd525b7a68fa85cb4457e810f8da57c7696c922a367eb1ccbd78893e70ec
-
SHA512
4e646e8dfba6c79dce793bbf5652476030a7407cd7a14bf46ca62384f6111ee1790f38cbd95a05fe0dc6a57174e9940a1c5c08ec64eaa07ca208ac2c376b2b02
-
SSDEEP
24576:Xfi9TwnWsQgFWIgzeZpf5HocFohEV1FhJdTNye+AcuCcSZw:NWDzeZLocFohEV1FFTIeouB
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17bcdd525b7a68fa85cb4457e810f8da57c7696c922a367eb1ccbd78893e70ec.exe"C:\Users\Admin\AppData\Local\Temp\17bcdd525b7a68fa85cb4457e810f8da57c7696c922a367eb1ccbd78893e70ec.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx