Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
26-12-2023 01:07
General
-
Target
47efce6fb026f49a84a6eb569d05cbca.exe
-
Size
549KB
-
MD5
47efce6fb026f49a84a6eb569d05cbca
-
SHA1
0b99538d5635b4c4fc1e0a46c79115ad9161be4d
-
SHA256
30c80cd3cee93166b62d2ed9aef56f81647a7264a668505f82a2b0953b1793c7
-
SHA512
7224d813160aea83d5a52e0709b13e2f4d1666809c334caad7d046d131981e717bc9e43f0fb121e9bc4abedca01c89614eba02a68d2965ee1b5e8e4a1d7bfc66
-
SSDEEP
12288:mxXk7PY5sUFvE2ML3AOwFSQA/KQ8NfiI6n0dMMi1:m9N5sUF8VTA0rN8NKI6n0dMMi1
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 19 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in Program Files directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\47efce6fb026f49a84a6eb569d05cbca.exe"C:\Users\Admin\AppData\Local\Temp\47efce6fb026f49a84a6eb569d05cbca.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
1.1MB