Analysis

  • max time kernel
    47s
  • max time network
    53s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 07:18

General

  • Target

    1347be52b3f3321caca39ff5cb9a60745422e3b91d46b67d2f11c0b77c61c88d.exe

  • Size

    937KB

  • MD5

    895eabec1e3a1513ff4e17d80bfc0e8b

  • SHA1

    4c0db69dc795b795d62d5c3c0dbc5d4c5abdf9ec

  • SHA256

    1347be52b3f3321caca39ff5cb9a60745422e3b91d46b67d2f11c0b77c61c88d

  • SHA512

    e904b3473e96a23be7cc02db247b729a98e5be6f6df8b876d2ef4ee4988925e560887b52d26b4edf4978587b1ca60d86b2ead0ab71931cecb2b680afdbc4a62e

  • SSDEEP

    24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSGJEh:ybZfGZARViQkA/0TIR3gGvtxTh

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1347be52b3f3321caca39ff5cb9a60745422e3b91d46b67d2f11c0b77c61c88d.exe
    "C:\Users\Admin\AppData\Local\Temp\1347be52b3f3321caca39ff5cb9a60745422e3b91d46b67d2f11c0b77c61c88d.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1364

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1364-54-0x0000000075091000-0x0000000075093000-memory.dmp

          Filesize

          8KB