Analysis

  • max time kernel
    85s
  • max time network
    104s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2022, 07:00

General

  • Target

    947d94ef60647ceca487bbc0e018698dc6039570d0a766c55c54af6c3e83fa58.exe

  • Size

    937KB

  • MD5

    e7dec99ffe8e8370b4cc8025362ee133

  • SHA1

    798e26ab6b4abea963f6fc5ef5151533c1f23210

  • SHA256

    947d94ef60647ceca487bbc0e018698dc6039570d0a766c55c54af6c3e83fa58

  • SHA512

    ac9a2b9d7cbd9d0853d194f92b7535b014bfa13c908113f659e2ba66aa85e56fa9bfde17d0c8ae5617c5c90ca4eed72ef78b8933a368783151db81d98a462dc4

  • SSDEEP

    24576:S/6NgZyGGZAim8giQ3UA/0TIRKb0gJAvaAtmSJcSjJEh:ybZfGZARViQkA/0TIR3gGvtx4h

Score
7/10

Malware Config

Signatures

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\947d94ef60647ceca487bbc0e018698dc6039570d0a766c55c54af6c3e83fa58.exe
    "C:\Users\Admin\AppData\Local\Temp\947d94ef60647ceca487bbc0e018698dc6039570d0a766c55c54af6c3e83fa58.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2012-54-0x0000000076531000-0x0000000076533000-memory.dmp

    Filesize

    8KB