Analysis
-
max time kernel
141s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
-
submitted
04-11-2023 20:34
General
-
Target
NEAS.8968f444004b45557a123457b6bac480_JC.exe
-
Size
685KB
-
MD5
8968f444004b45557a123457b6bac480
-
SHA1
8da6cc6717defc92f23ddc493c3f94c9bd33df60
-
SHA256
f7454803a72c4df2b5803b134cc553cc3c4e4b1cba3fe31c944ee8da45e6ce0e
-
SHA512
244e9b6bb2e5b94fbdaa4a9b0fa6b112a8967739e2f3d574f56c0e85a929231fe4fdd3d3771fe276a1f425b421a7f609974f03b5e96a4409a4d485bd2894a9f2
-
SSDEEP
12288:OPvUtqvBBU4snZQosApKYJQ5IW/FlchZG2HMDYkats4JJfCJp91Do6/qh:OP8EvDU4snZ/sAwYW/Flci8MDYkaCT10
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.8968f444004b45557a123457b6bac480_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.8968f444004b45557a123457b6bac480_JC.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx