77bce6278ca4ff5863280c4cecc53cfdd3097ae67f617d1e62c66bab8d313ed3

Analysis

max time kernel
79s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2023, 08:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3fbd744372d53f4fe9f34e8173c6c21d.exe
Size 674KB
Sample230527-ke97ksbf5x
SHA256 77bce6278ca4ff5863280c4cecc53cfdd3097ae67f617d1e62c66bab8d313ed3
MD5 3fbd744372d53f4fe9f34e8173c6c21d
SHA1 c3dafc1edb048a9b1901c28a38521d0c3a1019a9
SHA512 574e48cd5a62c9149056fecfd5e7a9896e3aa17c6eac18920697d8e1b87c43d29a4af091f83a2f4585380f0f979b13eebacb7d3b1d75aacfe745f7fd22e7f197
SSDEEP 6144:KvY7uKa7GjX7jpbERxpp521t+6eslnCUGwfxIRLtxIRLuovZ3H3AdKy9HGeofJgG:3/04rlwppx6eDaooojmN
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

C:\Users\Admin\AppData\Local\Temp\3fbd744372d53f4fe9f34e8173c6c21d.exe
"C:\Users\Admin\AppData\Local\Temp\3fbd744372d53f4fe9f34e8173c6c21d.exe"
1⤵
PID:3760

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3760-135-0x0000000002D00000-0x0000000002E6E000-memory.dmp

Download

memory/3760-136-0x0000000002E70000-0x0000000002F9F000-memory.dmp

Download

memory/3760-137-0x0000000002E70000-0x0000000002F9F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads