Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-11-2022 03:22
General
-
Target
9c131cc7d89eab7096540dbb5c0b7e88009268c1c766116057e27ba17c03b96d.exe
-
Size
1.3MB
-
MD5
1792d07facc82a4febc29e71509a37b6
-
SHA1
859b836685f94ca6efd96dee9a2cc5194ef4054f
-
SHA256
9c131cc7d89eab7096540dbb5c0b7e88009268c1c766116057e27ba17c03b96d
-
SHA512
66037611ea24f3d9779573ec1b9c30d17c8469691ae202d9be7946fa47e0c95d685381428d3df7a8036e4081e0ebd5d8c75605f170734ebafd0d643868256e44
-
SSDEEP
24576:YfKf9qrhWQehAhcVdWhnOleV9rtENptZrAoQGcSTDZD:zVqrhi+hcVdWhd7OfZFQcZD
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c131cc7d89eab7096540dbb5c0b7e88009268c1c766116057e27ba17c03b96d.exe"C:\Users\Admin\AppData\Local\Temp\9c131cc7d89eab7096540dbb5c0b7e88009268c1c766116057e27ba17c03b96d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx