Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
02-06-2023 01:24
General
-
Target
459c755800f6394bfced303c0f9002d0.exe
-
Size
209KB
-
MD5
459c755800f6394bfced303c0f9002d0
-
SHA1
710ab70b5498c0b2094997cb63898475af859388
-
SHA256
2155b81fb8e4fb169bbdce891d542edd5be8cf14748a6e6e7d03edb28d5efc42
-
SHA512
b4258b05709d4163210f28fc1bbc4935e9b681c65c48f3255842cf46f07fa34889f50593f8497113ec97e47271da1d6b13048fe70435219b3f7f48910225a2b4
-
SSDEEP
3072:ZijyZbpz7BFE4JjAcPsOrKBYS+hWkfe5B/IVa4cO9yNk6SA0MkGzzW/lnout9va0:pNz7Bq4JRs9uS+hvGfDd10htlnoS9CHU
Score
9/10
Malware Config
Signatures
-
NirSoft WebBrowserPassView 2 IoCs
Password recovery tool for various web browsers
-
Nirsoft 2 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\459c755800f6394bfced303c0f9002d0.exe"C:\Users\Admin\AppData\Local\Temp\459c755800f6394bfced303c0f9002d0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
528KB
-
Filesize
528KB