731b6ea46ede14cd88aff2fe82b29a0311d6acb7de673b75ddae3fd46030ff44 | Triage

Analysis

max time kernel
251s
max time network
305s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 08:36

Sharing

Report Analysis Logs

General

Target

731b6ea46ede14cd88aff2fe82b29a0311d6acb7de673b75ddae3fd46030ff44.exe
Size

996KB
MD5

0fe043133cc55ef3cf6f64c319eb3fff
SHA1

2ba8f8d90cc60d325d87adfd806c2cddd8f1ffdc
SHA256

731b6ea46ede14cd88aff2fe82b29a0311d6acb7de673b75ddae3fd46030ff44
SHA512

4425b0cc631d3d5fe297df7029e92d5ef4ff8a47356506a08387e7d353918cd470fef399ad718329ddd99f159527cc0ebbf263d8028926bca91f742f0ea00f61
SSDEEP

3072:aSsvihLlTQz9z71iURo2SJJmY6uFNcgifDbmeTXwVdBR:rsqhJMxzJiU5SeLmNSbmebW1

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

C:\Users\Admin\AppData\Local\Temp\731b6ea46ede14cd88aff2fe82b29a0311d6acb7de673b75ddae3fd46030ff44.exe
"C:\Users\Admin\AppData\Local\Temp\731b6ea46ede14cd88aff2fe82b29a0311d6acb7de673b75ddae3fd46030ff44.exe"
1⤵
PID:1196

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1196-132-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/1196-133-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download