Analysis
-
max time kernel
148s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 19:28
General
-
Target
37f9e5487aea1739942a3efa5ff5f4a2.exe
-
Size
547KB
-
MD5
37f9e5487aea1739942a3efa5ff5f4a2
-
SHA1
d260d58ced21dea1a63736efe3cc14c8797092d9
-
SHA256
e0de931e461ac38e253267b4174f252669f326236bbc479065b70c3c7de696bf
-
SHA512
58bb42dddad7fc88dcaf1d9e7269838cd5c286be2922808d06547c15e26e9d12120111521244964805cf11c8885cd9ae74c923cc7a3679c85ae17b8f0d7d8f8e
-
SSDEEP
12288:lxXFk+V8mXtoDBKAJPEih0wQG91k+m4EsEzRPHzMMSn:l95V5ZBiWwQA1Hm4EsEzRPzMMSn
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 19 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\37f9e5487aea1739942a3efa5ff5f4a2.exe"C:\Users\Admin\AppData\Local\Temp\37f9e5487aea1739942a3efa5ff5f4a2.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB