Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 17:18
General
-
Target
493bdfe11cdf144149724b81457e13bfa3a96c50213e168a50cb5adcff6cdade.exe
-
Size
1.3MB
-
MD5
34eefa15d97949440d7fcdfb29faf63b
-
SHA1
b3e7e2f6e9b43407a3849b53771fa780a0402c69
-
SHA256
493bdfe11cdf144149724b81457e13bfa3a96c50213e168a50cb5adcff6cdade
-
SHA512
56f6d91f02911d7bd59d505813e4cf64a1858346453570b049ec665a154b28570d7a6277eff6f0f74e474a820f3e19502dc1b7f826ca8b0abd55d82a9682d97c
-
SSDEEP
24576:vCbV1tebpntzapYXTul7JOaNBbArSv8e0ZtAEZcSXqNT:sEbpnKoTul7JOaNOrve0Z1kNT
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\493bdfe11cdf144149724b81457e13bfa3a96c50213e168a50cb5adcff6cdade.exe"C:\Users\Admin\AppData\Local\Temp\493bdfe11cdf144149724b81457e13bfa3a96c50213e168a50cb5adcff6cdade.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx