Analysis
-
max time kernel
58s -
max time network
64s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
25-11-2022 06:59
General
-
Target
d52d8a598d5cf1c03aba61a11ab4a121dd5953c16fc88376e7a104f08bbdcade.exe
-
Size
937KB
-
MD5
17e4d61c6926746874365d79ff263818
-
SHA1
5e746df37fbbcfd26593d89997ffea84a89c6959
-
SHA256
d52d8a598d5cf1c03aba61a11ab4a121dd5953c16fc88376e7a104f08bbdcade
-
SHA512
177ed7745318e26e4e7e117ea5ac70bfa68c8996768bf326c4d67b676d3a7b57aca48db75b4f6f2f136f8c872e55e42f2dc00d0a2454e2f908a07044db2c8aa3
-
SSDEEP
24576:Oj4YKC2ab1h/h9s99JLU8xwRhscqUqAASgCcS5ej:tpCTbfh9sNLU8xwRXq78gfj
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d52d8a598d5cf1c03aba61a11ab4a121dd5953c16fc88376e7a104f08bbdcade.exe"C:\Users\Admin\AppData\Local\Temp\d52d8a598d5cf1c03aba61a11ab4a121dd5953c16fc88376e7a104f08bbdcade.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/304-54-0x0000000074C91000-0x0000000074C93000-memory.dmpFilesize
8KB