Analysis
-
max time kernel
147s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-11-2022 04:32
General
-
Target
8813606720d4eb9ccff188971c938a53afabcf7b1b6f7dd620446c06c6f85f9c.exe
-
Size
980KB
-
MD5
28935452db7b9c0f57aca20f43c410bd
-
SHA1
21e8ea4b884a3ba6fe70c24d5cb6e827700495b4
-
SHA256
8813606720d4eb9ccff188971c938a53afabcf7b1b6f7dd620446c06c6f85f9c
-
SHA512
55f19be3f26c55d38852a15105b316bc4d1eec1a6f093bde9a4496de876cdbeb2faf2814c9f6243fcf44492e31e6f22bd6806574bf0e0559e8400443cd654ec9
-
SSDEEP
24576:eCv+HT1ehb7VVuaMWVxXM79wlamaclJZUAc/opcSgk:kBehb7maMWVxXM7lBKJZ5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8813606720d4eb9ccff188971c938a53afabcf7b1b6f7dd620446c06c6f85f9c.exe"C:\Users\Admin\AppData\Local\Temp\8813606720d4eb9ccff188971c938a53afabcf7b1b6f7dd620446c06c6f85f9c.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx