Analysis
- max time kernel
257s - max time network
324s - platform
windows10-2004_x64 - resource
win10v2004-20230221-en - resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system - submitted
30/04/2023, 21:42
Behavioral task
behavioral1
Sample
81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21.exe
Resource
win7-20230220-en
3 signatures
150 seconds
General
- Target 81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21.exe
- Size 181KB
- Sample230430-1kh82scf82
- SHA256 81b16b8e152322da3b81e7703e430c77d3f06e53b0ba24a5a82e0c3e371c9a21
- MD5 16685b20847f33924fb8d849229c41f0
- SHA1 c37f16cecc342c1f9361a759c1f232f069a8fba6
- SHA512 ee00442f939e617893c57cefba4b2e82fabef7d75d6e980daeb4528a40e639404375e4e1b21e2a0136e627a1f13d0a314ed7fdce9e29e20ba4a415bf3b0bb6bb
- SSDEEP 3072:5BnBuDhmb9H7V1oVt3J1HsgujusEAqFlxM7bYyaAWxLYWG21N41AnLPW2A5kVXDO:fADwHqdskF28AWhYWX1NoAn51o
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs