Analysis
-
max time kernel
53s -
max time network
180s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
19-01-2023 03:59
Behavioral task
behavioral1
Sample
5aebbe7f3cee0b66e325844bfc4837a7dc36831c4b0d7201520b07530a2ad881.exe
Resource
win7-20221111-en
General
-
Target
5aebbe7f3cee0b66e325844bfc4837a7dc36831c4b0d7201520b07530a2ad881.exe
-
Size
178KB
-
MD5
fc146adbe18d3cbdd7989a02b7bcc761
-
SHA1
6c97e18f00f25760a1630513bfd201d1db8ee327
-
SHA256
5aebbe7f3cee0b66e325844bfc4837a7dc36831c4b0d7201520b07530a2ad881
-
SHA512
c9175e6e68a654315ad10772305503b03cfb5a0637fd9ab8c4807d30122a14fa6d0ab748fcf09d821b14b7559ef18bf1aeaeea419e2dce5a38002bab22262e63
-
SSDEEP
3072:fL5CYCNIqLif2enaQtmJ+qbozxlJw9grK9FsKZKL7BWg/Qud3quMIPYzIxZE9jP:fNCn+fJksXEgW4KZOB/ou8uMIQzIxZS
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.