Analysis
- max time kernel
153s - max time network
160s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
26/09/2023, 07:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe
Resource
win7-20230831-en
3 signatures
150 seconds
General
- Target SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe
- Size 312KB
- Sample230926-jftesagg42
- SHA256 7f16846c7c747cfedaa9d1d40b933f66cb6580df70be4c0d8ad9a8cfcafccf3d
- MD5 0ad6deed1fc88623c70e2c9ee906dbb1
- SHA1 110d0598292746bad78e23c455acdc0e380ecc02
- SHA512 0591216674cf9890e051ec935351984b30514be73078518b3a96f233ff40952b43b117834a149b3f90ef877cd7de55e661b5876b633ec93a53e6974cfa349aa6
- SSDEEP 6144:EfqpO1A8zQLxCdeJkPgjJuYyJlwNIPjmfAO6Dxoz0QL38wsItQv:EDNkLxCdYkPgjkwhfLIQL3H8v
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe 4800 SecuriteInfo.com.Win32.TrojanX-gen.12508.24153.exe