Analysis
-
max time kernel
308s -
max time network
330s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 04:34
General
-
Target
fa7fcb4251a09a0787ec6189dae6054d938eff45f47ffb8f24ccc52900ca3460.exe
-
Size
973KB
-
MD5
750037d817fb9c012302cac5bd3d4786
-
SHA1
8554834468307cc884b42cc654ff81739b55036d
-
SHA256
fa7fcb4251a09a0787ec6189dae6054d938eff45f47ffb8f24ccc52900ca3460
-
SHA512
548e95cc0dd7efe2ff6d8d13cc23d1d3fac1c95cfd62d72b7c7f6833409c9f1d4dac33c204ae89d75cd3bf9db294955a45903035bde6b76ae1779a4db147f9e8
-
SSDEEP
24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrrx7wH5:IR0GRJ5RsBPUKGhtQugkZOba5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa7fcb4251a09a0787ec6189dae6054d938eff45f47ffb8f24ccc52900ca3460.exe"C:\Users\Admin\AppData\Local\Temp\fa7fcb4251a09a0787ec6189dae6054d938eff45f47ffb8f24ccc52900ca3460.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx