Analysis
-
max time kernel
180s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28/11/2022, 05:57
General
-
Target
6f6bdfcfa367a554ec141f22356ff4b80e688744d80c52bb510eb4daa8bedc6b.exe
-
Size
962KB
-
MD5
d0990e3ef7b10b855fb6e2385c16cc24
-
SHA1
3961fd8efdba2d56ec6c358567409245fa852706
-
SHA256
6f6bdfcfa367a554ec141f22356ff4b80e688744d80c52bb510eb4daa8bedc6b
-
SHA512
3e1100a03850d0eb3d2e3b8686bc5825739e9b5f7af4eba10ca40b6159dc4a5c832d069718866ff9f60ed6af71145b12c7b62acbae5cdc0407869c3e5cd20480
-
SSDEEP
24576:Ub3Mw0WK2EQLViZzRCIDPhUXtlq7qR8QBIZ5AxkcSGrZV:g3x0WKUoZzRCIDPn7+ZIZ89r
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f6bdfcfa367a554ec141f22356ff4b80e688744d80c52bb510eb4daa8bedc6b.exe"C:\Users\Admin\AppData\Local\Temp\6f6bdfcfa367a554ec141f22356ff4b80e688744d80c52bb510eb4daa8bedc6b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx