Analysis
-
max time kernel
144s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 16:53
General
-
Target
2ebbf2b9212c087e79ba5670ceb894e9.exe
-
Size
550KB
-
MD5
2ebbf2b9212c087e79ba5670ceb894e9
-
SHA1
56a091bddbe4830a03920405e9ed6e4c1dbfb5b9
-
SHA256
0a075bb70d0bc4a1d31e98014e43ea02153a78d758c4faa3a731f461071b2f5a
-
SHA512
90c03d6c01fe1c457d4dc75d0938f1e8509adc08c06c38f5a7c875a868c7cf9a91f1ac8a2f32be9b944767cf0f7bffd1e4721d5dd13ef285b8a9f2b79410a589
-
SSDEEP
12288:ioHe9W0+Icx+EDwCnAaeT5VH45nxZ2TOL3nIHEhsIlQ9JAfN01XAr5MMBh:de9W0ExrDf56Sym3AE20SAfgQr5MMBh
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 19 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ebbf2b9212c087e79ba5670ceb894e9.exe"C:\Users\Admin\AppData\Local\Temp\2ebbf2b9212c087e79ba5670ceb894e9.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB