Analysis
-
max time kernel
2s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25/12/2023, 02:47
General
-
Target
00e026c4ec7deeff71912f72acc7c124.exe
-
Size
630KB
-
MD5
00e026c4ec7deeff71912f72acc7c124
-
SHA1
9f10c6195175d7fd9af6419532a014bd4134575e
-
SHA256
4a1136b170bc73c93059199286acb4fa86564e1306fe33d56d8adf8b25b0e2e2
-
SHA512
604a7df24b9f051deda6911b322be31718bd3a18fd16e8c4c1078816167766b1f59175b72bcaf3b0404d45d22b60a204148c6b64c9f1c99b3af2a5c0820f455a
-
SSDEEP
12288:M6C0w9s0Dj3LF0JNjnmz0w8ajtzBwOhIzcJUE+Jp5+xzSk:Mx0w9s0DTLF0PKz0ruBNGoJU/yzSk
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\00e026c4ec7deeff71912f72acc7c124.exe"C:\Users\Admin\AppData\Local\Temp\00e026c4ec7deeff71912f72acc7c124.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx