Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
24-11-2022 06:56
General
-
Target
b46ffa66a17b860bd835a03c5e958d8162a096b883942853b0659737857aa280.exe
-
Size
937KB
-
MD5
54877c53fba5e67237ba6a8509582d84
-
SHA1
aec6915272214e0fa3450b73e7c182e55dbf2f0e
-
SHA256
b46ffa66a17b860bd835a03c5e958d8162a096b883942853b0659737857aa280
-
SHA512
759976deb6394be0fd8b251d866a00157d8cb920c6902aeb45004abeef28eabf946ee1618347e24a9ffc4768086b0d6ed138235559c9b1cb0112fe2ad8d5583a
-
SSDEEP
24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSZJEh:ybZfGZARViQkA/0TIR3gGvtxKh
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b46ffa66a17b860bd835a03c5e958d8162a096b883942853b0659737857aa280.exe"C:\Users\Admin\AppData\Local\Temp\b46ffa66a17b860bd835a03c5e958d8162a096b883942853b0659737857aa280.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx