86388f9b6971bcd6201b6b1229e28252f9bbc942107aa360be7afe98eafd4d92

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

02ee39c895bc4df835ae4e508be60075.exe
Size

7KB
MD5

02ee39c895bc4df835ae4e508be60075
SHA1

1d976be367d29fae1fb08197a9680e69e0254442
SHA256

86388f9b6971bcd6201b6b1229e28252f9bbc942107aa360be7afe98eafd4d92
SHA512

f26b118ee6f6704a319c231ac27012a01b3f7f1f4e34d71d561c8b25c25adc90b7d263763fe491fcedf9bccc3bb1d228ceff413bdc9a52cdd12b52a972ec7b0a
SSDEEP

96:67kv0AxMwt3CAxNegW1JyedFjUT9Oy4GwBdsJ4zGI5XB098MSSQ:Ec0qXBjNo15jRrsJ4zGI4m

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2276	02ee39c895bc4df835ae4e508be60075.exe

C:\Users\Admin\AppData\Local\Temp\02ee39c895bc4df835ae4e508be60075.exe
"C:\Users\Admin\AppData\Local\Temp\02ee39c895bc4df835ae4e508be60075.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads