Analysis
-
max time kernel
64s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
01-12-2022 15:27
General
-
Target
a4f494d633707a66515f2a03bbd87e11c1d901c4225985aef09a5ab8466fe798.exe
-
Size
631KB
-
MD5
54c130a90118d2ce3007b74374f1c7a1
-
SHA1
88eafbde92bb0b3946ff631936bc5572e99ad8cb
-
SHA256
a4f494d633707a66515f2a03bbd87e11c1d901c4225985aef09a5ab8466fe798
-
SHA512
62eac3e1ef0baafc15404ccd52ee7f7b50a16623dac2d97735540b7b061d92eb5e90a9533029528287cfd4f5e7c9b4f2c8a2230d2ddfddd260dd7e58ea7b28a3
-
SSDEEP
12288:X3H4hsYM5XggUDeZIPxVwHiUhzhiGh+6gXjABCJp9KAu5:XysYM5XsDeaAiURth+6+jbPu5
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4f494d633707a66515f2a03bbd87e11c1d901c4225985aef09a5ab8466fe798.exe"C:\Users\Admin\AppData\Local\Temp\a4f494d633707a66515f2a03bbd87e11c1d901c4225985aef09a5ab8466fe798.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx