Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/12/2022, 23:48
General
-
Target
52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3.exe
-
Size
1.0MB
-
MD5
8f568aad1ac783f08de424021460f314
-
SHA1
336048b09bbd610de016a4d122e9e9c98d8b0812
-
SHA256
52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3
-
SHA512
dfb33adf6f71a2a648697bd0edb951134d1649a9891eae2021fc9e146b74b8b7044507e3aac6d734d3b13c244f348b5c30697ee0f4a730a0a62dec2cb8a76f10
-
SSDEEP
24576:68xwcpPT3UEmRcNT6dXycr+TAPwj6eH0uJFJb8wguqYUZh:VGc1z6cZ6dCcr+TAP26S0uJFFq/P
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 10 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3.exe"C:\Users\Admin\AppData\Local\Temp\52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3.exe"C:\Users\Admin\AppData\Local\Temp\52e713ba3ace3fcb68b22cd3a63c0227cde438d827527773ee590def5c0446d3.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB
-
Filesize
968KB