Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
28/11/2022, 04:48
General
-
Target
cfc898fabb1b518d0f5b2e5cee60b18cb2b73d0f0ecccc4f0505ad5ce8d01364.exe
-
Size
973KB
-
MD5
1d9b4bd16b529720afdae2fbd2e3a8bf
-
SHA1
58b1411303b307857d13998c366ad6e9839a9320
-
SHA256
cfc898fabb1b518d0f5b2e5cee60b18cb2b73d0f0ecccc4f0505ad5ce8d01364
-
SHA512
fcdde9fc1428fa0b5d30bfaa251c0cd8ba80b9e412605f820ec4117cffaab736d3d15a40c97650d72e03f7c4fdbffb7f559f8298cf97fe4a72962d24f185b03a
-
SSDEEP
24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrr57wH5:IR0GRJ5RsBPUKGhtQugkZOba5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cfc898fabb1b518d0f5b2e5cee60b18cb2b73d0f0ecccc4f0505ad5ce8d01364.exe"C:\Users\Admin\AppData\Local\Temp\cfc898fabb1b518d0f5b2e5cee60b18cb2b73d0f0ecccc4f0505ad5ce8d01364.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx