Analysis
-
max time kernel
151s -
max time network
156s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
26/12/2023, 14:14
General
-
Target
74da59a02bda4187b6dfd064e9c3c398.exe
-
Size
789KB
-
MD5
74da59a02bda4187b6dfd064e9c3c398
-
SHA1
42709e861c447df02dec4197804d7efaa72c7606
-
SHA256
40f155eb123c55ee7a2a988729d1f373c22c971044e3b0dcda65f719fe66aeab
-
SHA512
5ec1cc9ea33bd3e42ae0f090e7543f41462f2950113162fa8a4316ef88e42b96689e48164996d81ca52ac93f0bbb57b3f7fbbe3f9fc2f730510baf8713ed455c
-
SSDEEP
24576:dx9pGLmU3n26/Z/OMP5uAERALR7JQWcfI5lTCmEx:H9UG6R/P5rERydxcQTEx
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\74da59a02bda4187b6dfd064e9c3c398.exe"C:\Users\Admin\AppData\Local\Temp\74da59a02bda4187b6dfd064e9c3c398.exe"1⤵
- Adds Run key to start application
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.2MB