Analysis
-
max time kernel
186s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28-11-2022 04:32
General
-
Target
11b8b668ceaa29b5c8982cfc7a569f90fd6c47b8cdf67c6ff6384238fea3641b.exe
-
Size
963KB
-
MD5
fa22f8a37ae547ad2aa96844dc252311
-
SHA1
0e9b6c506e051fd2ad05ba0bba6ee074bb1b999a
-
SHA256
11b8b668ceaa29b5c8982cfc7a569f90fd6c47b8cdf67c6ff6384238fea3641b
-
SHA512
a24b65af9311c4dca15df77b9d2658eb022e5055adca37f871e9b23780effc8de0b308f1e9b682fcd67aca64fa3674e9a4ea915e76fc32cd794f1d5f1ff1c28a
-
SSDEEP
24576:YGJoyxOsGnS6tg3k2FORO5AvDwlk0hhHF1dZQAihacSTyqBc2:YUlOsGnSa2FORO5A90DndZ4hLac2
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\11b8b668ceaa29b5c8982cfc7a569f90fd6c47b8cdf67c6ff6384238fea3641b.exe"C:\Users\Admin\AppData\Local\Temp\11b8b668ceaa29b5c8982cfc7a569f90fd6c47b8cdf67c6ff6384238fea3641b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx