Analysis
-
max time kernel
159s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 15:32
General
-
Target
eef663a3d3a4f546e8e2e89f2530bf2df3c151711efaf67a10bd2500b4b9d9d4.exe
-
Size
935KB
-
MD5
37efefa0940b6a865d673b099d928200
-
SHA1
cb1805e048d52df41d2fc6c2136a8e96681dd762
-
SHA256
eef663a3d3a4f546e8e2e89f2530bf2df3c151711efaf67a10bd2500b4b9d9d4
-
SHA512
ff2171c7cabb031374c7b26fe2e00856b52428c3ff47f59786d15734a6b5ccf9bee4cd7d0640d23bd767d07700df2b791111503c4d14c586a90d5ca2c260c46c
-
SSDEEP
24576:lhojaX5qTbSnL4kwUlZNKfMwgxwUZA01BAypIcSegFEEoF:7caX5q+Xw8ZNKfMJwyA0Xpy2EoF
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eef663a3d3a4f546e8e2e89f2530bf2df3c151711efaf67a10bd2500b4b9d9d4.exe"C:\Users\Admin\AppData\Local\Temp\eef663a3d3a4f546e8e2e89f2530bf2df3c151711efaf67a10bd2500b4b9d9d4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx