Analysis
-
max time kernel
175s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24/11/2022, 02:26
General
-
Target
ac13af3cbee2ae2d7e11998b51aa055ef138e665040571f911f97736a9b37baf.exe
-
Size
1.3MB
-
MD5
57691140231bee4fa92f206e968fd919
-
SHA1
e9a83fcf92f57e1636381355ccc9dd3a80f9391e
-
SHA256
ac13af3cbee2ae2d7e11998b51aa055ef138e665040571f911f97736a9b37baf
-
SHA512
4fa6436a8ab3a8aa7d4800b0138d0431016c7fd908e209cfee0a1f1762d68f1b84f376b9f466b5edc69221b9a78030e740f6f57c91447a00caad1fca994e8483
-
SSDEEP
24576:FN0GwyBuP3nClQbhuaVab2FzUqh6v5BunN4EcSNnz+FbLdY:vFwyBuPSlqhuaVab2Fzd6fI4ZFbLdY
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac13af3cbee2ae2d7e11998b51aa055ef138e665040571f911f97736a9b37baf.exe"C:\Users\Admin\AppData\Local\Temp\ac13af3cbee2ae2d7e11998b51aa055ef138e665040571f911f97736a9b37baf.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx