Analysis
-
max time kernel
188s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 15:50
General
-
Target
d1ab13bde59be8d8dfd8a8b8b1a243292443ec96cdcefca1c1e5c4d82959face.exe
-
Size
1.3MB
-
MD5
2b440b7a96f2205325596b446abc5c8f
-
SHA1
0c97d64ff8c7f440a27351a9cacccc9ed0e35df7
-
SHA256
d1ab13bde59be8d8dfd8a8b8b1a243292443ec96cdcefca1c1e5c4d82959face
-
SHA512
2413a82bb0a170f3eb763befc788ec9e0b38547fc6c1624bc5c03e38184305b803d9cbfc31ed8b012361e3ca961e62cfc67fc255b9c1c452687f180bc196b09e
-
SSDEEP
24576:qi5MiaIDoYuyK4yFtgJYZ0EYa9AftVS3oYIQrpdrpWcZRACH2cSZr4Spob:7pDoYuyY4a0EYa9A3SOQrpdrpTZNHO4l
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1ab13bde59be8d8dfd8a8b8b1a243292443ec96cdcefca1c1e5c4d82959face.exe"C:\Users\Admin\AppData\Local\Temp\d1ab13bde59be8d8dfd8a8b8b1a243292443ec96cdcefca1c1e5c4d82959face.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx