Analysis
-
max time kernel
26s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 17:08
Static task
static1
Behavioral task
behavioral1
Sample
59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe
Resource
win7-20220812-en
General
-
Target
59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe
-
Size
1.3MB
-
MD5
7c56ba458a6af1887e0690c12c13d00f
-
SHA1
246f9f932395bba4fa8d8379e0454e78cc808fdb
-
SHA256
59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b
-
SHA512
9fbeed10dddf52e7cb5c515b83559646995b299224b8b8a0374ea01b69726af9f24982efa74ce23845c46e25e8442ab1703f8c860186aab30c32201b86bf4c67
-
SSDEEP
24576:qi5MiaIDoYuyK4yFtgJYZ0EYa9AftVS3oYIQrpdrpWcZRACH2cSdr4Spob:7pDoYuyY4a0EYa9A3SOQrpdrpTZNHy4l
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exepid process 1952 59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exepid process 1952 59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe 1952 59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe 1952 59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe 1952 59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe"C:\Users\Admin\AppData\Local\Temp\59dae6144a811b6999cd0ae7cfb76d8d564dcff09afd8ba9fb022e273b08e48b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1952-54-0x00000000762F1000-0x00000000762F3000-memory.dmpFilesize
8KB