Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25-12-2023 07:02
General
-
Target
0d623bce1856f20ed0feebffc982d661.exe
-
Size
803KB
-
MD5
0d623bce1856f20ed0feebffc982d661
-
SHA1
e57acd827370b7c126e1fa2d98d4d6bdbc3d7b55
-
SHA256
1b24c1da96bcd5a3cd5ec12aeb4c831f153544aba7b446812d8405995088a8f7
-
SHA512
9445589c2d4847390b928bb497d0bb0ed110214682d6dea9bc91ba56c85cc9f0b5cc12f60c8070f2fc9cfb2032dd1e06f5ba9dba83f8ea03beba6ccf82f852e5
-
SSDEEP
12288:HEOMajtYag2ae+Rvv/S7w2eDrL4gHotqMVCO/qkc09W9jrSBfJnrhnOTOnji:zMaj1g2M9aoLlotlCOBuHwJrhnOTZ
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d623bce1856f20ed0feebffc982d661.exe"C:\Users\Admin\AppData\Local\Temp\0d623bce1856f20ed0feebffc982d661.exe"1⤵
- Adds Run key to start application
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
4KB