Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
20-06-2023 16:32
General
-
Target
0a0fb629a415802ac21e2e171a248b1d4e47eaa8ef9ee249cd60ca53c15d05bf.exe
-
Size
219KB
-
MD5
489aebf582dbe64c3c9602ab984f4b4e
-
SHA1
5a4e9afab9bc144c1a2267223553b55f8b01d3f5
-
SHA256
0a0fb629a415802ac21e2e171a248b1d4e47eaa8ef9ee249cd60ca53c15d05bf
-
SHA512
7c5df4fe5c30797af1b1f89310b890e7c4377f297286b903803b81651f1ce6b8988f1e39e0e9f99ceedf07636c85ddef8b58d6f699052e9dde7bbbd6307cc0b2
-
SSDEEP
6144:3h8ycbEmFtrnp07wcr8U4KJkpRuTjwH66cdTSOkB:3hl10piwcr8pBRuTj7dTzkB
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Accesses 2FA software files, possible credential harvesting 2 TTPs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a0fb629a415802ac21e2e171a248b1d4e47eaa8ef9ee249cd60ca53c15d05bf.exe"C:\Users\Admin\AppData\Local\Temp\0a0fb629a415802ac21e2e171a248b1d4e47eaa8ef9ee249cd60ca53c15d05bf.exe"1⤵