Analysis
-
max time kernel
25s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
05-05-2023 18:59
General
-
Target
ae444c496eeff949194f6c6610fb8440aba8c2ec02409b38cfda986ed3ecbbd4.exe
-
Size
478KB
-
MD5
edca6b72afb530c08341cd47445646d9
-
SHA1
5909cb5df7306fed012892f569fd532e309ff771
-
SHA256
ae444c496eeff949194f6c6610fb8440aba8c2ec02409b38cfda986ed3ecbbd4
-
SHA512
7e1c69c8332fa8043d291be71a8fa826f384839cf26ed0f01c5afd71a4d4798f7d23fd2d9a4f6a80389a4e1ce647ea055d465cd3b96ed84a107cde96e132ccd4
-
SSDEEP
12288:CHRHC9B1JKQ+fkplRNDn0sQVJS9GbbYLAWsnGl:Cxi9B16fkxB0P2krGl
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae444c496eeff949194f6c6610fb8440aba8c2ec02409b38cfda986ed3ecbbd4.exe"C:\Users\Admin\AppData\Local\Temp\ae444c496eeff949194f6c6610fb8440aba8c2ec02409b38cfda986ed3ecbbd4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
240KB
-
Filesize
232KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
280KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB