Analysis
-
max time kernel
166s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 17:13
General
-
Target
51c1be3a4713f55bfe9d7db5acd9077ca3dd6f74888b85a29961fe48e16ddaf1.exe
-
Size
1.3MB
-
MD5
180c02189eb6a3a855c540db9bca64c1
-
SHA1
83846b30c96dc0dd546c53b7dc97cfef5e45544a
-
SHA256
51c1be3a4713f55bfe9d7db5acd9077ca3dd6f74888b85a29961fe48e16ddaf1
-
SHA512
3dccb3ff3e317af733c876b1fff897f3416166b566676830964f1de37a0eb16836e6ea23d64387ddc6596d14d49138263fb05a6903161e71e9ed94c90e20f2bc
-
SSDEEP
24576:vCbV1tebpntzapYXTul7JOaNBbArSv8e0ZtAEZcSkqNT:sEbpnKoTul7JOaNOrve0Z1pNT
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\51c1be3a4713f55bfe9d7db5acd9077ca3dd6f74888b85a29961fe48e16ddaf1.exe"C:\Users\Admin\AppData\Local\Temp\51c1be3a4713f55bfe9d7db5acd9077ca3dd6f74888b85a29961fe48e16ddaf1.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx