Analysis
-
max time kernel
188s -
max time network
216s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 03:26
General
-
Target
355ea197c8b1af790c996227a5719ccec3fc90b9ea638e08cbed64270c9235a8.exe
-
Size
1.3MB
-
MD5
5b786b752ed8adc52b36a019736eae3e
-
SHA1
89dbeb14749ec95fc6c09e97806f77a22d56a5c4
-
SHA256
355ea197c8b1af790c996227a5719ccec3fc90b9ea638e08cbed64270c9235a8
-
SHA512
46da130e2e93f7f0b3588f2c2efd5af91113f71db0c1889ab7aca1e539d82eb0f4894cb0b5db04bd28d118d0eef47cd759959147248ec7f5a6efee3013a1d422
-
SSDEEP
24576:YfKf9qrhWQehAhcVdWhnOleV9rtENptZrAoQGcSZDZD:zVqrhi+hcVdWhd7OfZFQqZD
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\355ea197c8b1af790c996227a5719ccec3fc90b9ea638e08cbed64270c9235a8.exe"C:\Users\Admin\AppData\Local\Temp\355ea197c8b1af790c996227a5719ccec3fc90b9ea638e08cbed64270c9235a8.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx