Analysis
-
max time kernel
232s -
max time network
341s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 11:29
General
-
Target
e4701a6687a95793c53356643b68ce9fc52581315bfb3a66bc1b9e3937270d38.exe
-
Size
937KB
-
MD5
917b040ecbc3f378d12fd685ec9d00b3
-
SHA1
cbbd9100b9c3224887170dfee2408dca30183c78
-
SHA256
e4701a6687a95793c53356643b68ce9fc52581315bfb3a66bc1b9e3937270d38
-
SHA512
18a08e2359438e93572951059a6731043c78c01512c23ed9f38d04f6622e7a87b2766bb7787a9b5df7827c59575551bed633d25caa022faeb8d391aedf614934
-
SSDEEP
24576:eLii0FS812mMs549d0ij+BgFoFoGQI9mWuYAHsbYcSxK:e30E812Dh9d0tBgFoFoI0Wesb
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4701a6687a95793c53356643b68ce9fc52581315bfb3a66bc1b9e3937270d38.exe"C:\Users\Admin\AppData\Local\Temp\e4701a6687a95793c53356643b68ce9fc52581315bfb3a66bc1b9e3937270d38.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx