Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
23-11-2022 16:50
General
-
Target
74d38d21d197e2c0fedb95885687b9f70cac3ab9d92c288d3e461ce1c79a8932.exe
-
Size
1.3MB
-
MD5
0789b165e7105ec5277c246428ab7a1e
-
SHA1
374ddfa44204c5cf1622a0138552676abcc62562
-
SHA256
74d38d21d197e2c0fedb95885687b9f70cac3ab9d92c288d3e461ce1c79a8932
-
SHA512
62ed2cb7e756106ea6e952f08b1d7d70c65b043c821c80eb2441d2ee4d98962f41ad2bf5858ce2159eedc46bad746d500401c7935bacd7f8c0bd5434d48d4d36
-
SSDEEP
24576:vCbV1tebpntzapYXTul7JOaNBbArSv8e0ZtAEZcSHqNT:sEbpnKoTul7JOaNOrve0Z1UNT
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74d38d21d197e2c0fedb95885687b9f70cac3ab9d92c288d3e461ce1c79a8932.exe"C:\Users\Admin\AppData\Local\Temp\74d38d21d197e2c0fedb95885687b9f70cac3ab9d92c288d3e461ce1c79a8932.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx