Analysis
-
max time kernel
144s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-11-2022 05:13
General
-
Target
826af4684b3763fbfc47a15bd53e42dfa8e247e0d6c71d2d1715e7e0695420fc.exe
-
Size
973KB
-
MD5
deb5262af7aa4a9627de5be9738be69f
-
SHA1
317be2cbbe4d4e576df5e28c8548433aee1ed877
-
SHA256
826af4684b3763fbfc47a15bd53e42dfa8e247e0d6c71d2d1715e7e0695420fc
-
SHA512
d767566e29ea6bfe805c009eb191fa5315e0790e1e9bf98cbd68634cf3058f6ca7f3fce67ea254dd28491337ef359aa314612134b8cf0173a4ae98c19c892645
-
SSDEEP
24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrr17wH5:IR0GRJ5RsBPUKGhtQugkZOHa5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\826af4684b3763fbfc47a15bd53e42dfa8e247e0d6c71d2d1715e7e0695420fc.exe"C:\Users\Admin\AppData\Local\Temp\826af4684b3763fbfc47a15bd53e42dfa8e247e0d6c71d2d1715e7e0695420fc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx