Analysis
-
max time kernel
139s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27-11-2022 21:15
General
-
Target
91b6e4a6bbbb2ef310c17a03033cd65d15785d71ff57bc1484b27244c68f605d.exe
-
Size
961KB
-
MD5
e90a67f09fc65416f1fac27ab8df7d1b
-
SHA1
f4f816b5d1246ba3787a89abefb103ca61c9eece
-
SHA256
91b6e4a6bbbb2ef310c17a03033cd65d15785d71ff57bc1484b27244c68f605d
-
SHA512
bd441390e2d0e8a572c98a29037dc80a1046354705b091f2e7a44aa67295b817f69c6b5c0c38e9d0d301fd660c72816be355a315374e674c91bc59cdc9416b05
-
SSDEEP
24576:ikQ1aOCco82PkHsddUplpYE+JglzGWqVgjsaxZiAvS5cS7S:r/co82CsrUplpYEZ1BjsEZyc
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\91b6e4a6bbbb2ef310c17a03033cd65d15785d71ff57bc1484b27244c68f605d.exe"C:\Users\Admin\AppData\Local\Temp\91b6e4a6bbbb2ef310c17a03033cd65d15785d71ff57bc1484b27244c68f605d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx