Analysis
- max time kernel
149s - max time network
33s - platform
windows7_x64 - resource
win7-20230220-en - resource tags
- submitted
29/03/2023, 07:51
General
- Target 519cdcc1f7e23b46fa1bdb7b7186a526.exe
- Size 734KB
- Sample230329-jptrxafd23
- SHA256 29e91d7b2fd3c332ab75cfd3a4bb78157de2f91d423d1e102ec67bc7c40e2525
Malware Config
Signatures
- Nosu
Nosu is an info stealer written in C++ first seen in late 2022.
Processes
-
C:\Users\Admin\AppData\Local\Temp\519cdcc1f7e23b46fa1bdb7b7186a526.exe"C:\Users\Admin\AppData\Local\Temp\519cdcc1f7e23b46fa1bdb7b7186a526.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1676-54-0x0000000000220000-0x0000000000221000-memory.dmp
memory/1676-55-0x0000000001DD0000-0x0000000001E19000-memory.dmp
memory/1676-56-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-57-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-58-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-59-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-60-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-61-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-63-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-64-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-65-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-66-0x0000000000400000-0x00000000004BD000-memory.dmp
memory/1676-67-0x0000000000400000-0x00000000004BD000-memory.dmp