Analysis
-
max time kernel
271s -
max time network
295s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28-11-2022 05:15
General
-
Target
7efed98d2ca19422a5e407b1b000e84e3e443a18d1f7f0791bbc124f7b2e567e.exe
-
Size
973KB
-
MD5
d93a1d23d51d6a44214c2b459919d7a3
-
SHA1
08b7a0e297ce40a0bfb06c303a4366575c7aa9c2
-
SHA256
7efed98d2ca19422a5e407b1b000e84e3e443a18d1f7f0791bbc124f7b2e567e
-
SHA512
8a79ab4564b14e3f82ebed1dcda2f7a5d73c37f6079a81a2ada8d42e95377d437b48238ff770fc6b5f58cb4add5b5877585e2b576a8909209307c7be117067b3
-
SSDEEP
24576:K+wU+0GRJBMyaosJdRnPUKGh6qltQpoRGbkZMA0uSrrA7wH5:IR0GRJ5RsBPUKGhtQugkZOsa5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7efed98d2ca19422a5e407b1b000e84e3e443a18d1f7f0791bbc124f7b2e567e.exe"C:\Users\Admin\AppData\Local\Temp\7efed98d2ca19422a5e407b1b000e84e3e443a18d1f7f0791bbc124f7b2e567e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx