Analysis
-
max time kernel
183s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 12:47
General
-
Target
959dd812a1697293204d3cdfb918e8effe54dafcc98f52f9d2d2441139b1a7a6.exe
-
Size
973KB
-
MD5
f959b8b5bd4de543e8fb808e3dd1e8e6
-
SHA1
b3c807c994c4df66bcf058f9550375200029cb2e
-
SHA256
959dd812a1697293204d3cdfb918e8effe54dafcc98f52f9d2d2441139b1a7a6
-
SHA512
81b0eaf0df547a8b388178058917a37bf922440a5ebe9424613b8811324554e8a7c745d80b272d5b5ef4f8a85a88a073da82eb937a50efe7a0b70eecc014421f
-
SSDEEP
24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrra7wH5:IR0GRJ5RsBPUKGhtQugkZOOa5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\959dd812a1697293204d3cdfb918e8effe54dafcc98f52f9d2d2441139b1a7a6.exe"C:\Users\Admin\AppData\Local\Temp\959dd812a1697293204d3cdfb918e8effe54dafcc98f52f9d2d2441139b1a7a6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx