Analysis
-
max time kernel
176s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
05-05-2023 18:44
General
-
Target
A.exe
-
Size
222KB
-
MD5
8104093918b6f2d2004535b24b1533ba
-
SHA1
f9cf4ae46a44ab7a39f35614167b2be9f1d66460
-
SHA256
337a646e6f1a641d9471b840ee21bff858e6ba24538a4f815191be85e5003e70
-
SHA512
d43dc6e765a528755d1004b591d580c8d3e5a49800980dab1073848f26c67c0350fe560762b46a3602e799ea8ee861bcc4f829020d5479e48c8ed6871fd139a1
-
SSDEEP
6144:O1vaKFbcprS5qlrCkxLjgmOA05HTr7N1DPz:SaKFbcVS5FUOAe7r
Score
9/10
Malware Config
Signatures
-
NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
-
Nirsoft 1 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\A.exe"C:\Users\Admin\AppData\Local\Temp\A.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
520KB
-
Filesize
520KB