ad55a4de42458ba68696c19bbe92b39cff115ff2b98576f84c6f9472d1a31b75 | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2be5fc94ec6bcd56cb679e44ba4963e0.exe
Size

664KB
MD5

2be5fc94ec6bcd56cb679e44ba4963e0
SHA1

71590e5cdc98221eb3e6a0778e0ece7dae004074
SHA256

ad55a4de42458ba68696c19bbe92b39cff115ff2b98576f84c6f9472d1a31b75
SHA512

c28232199ffafc999c3c9836d026f054bc2ba2c80056bd4bce16cbe961049c55eecad478a430e46f749a23badc72fe0a3d4b01989c34c3a0e88a4dc82a07a282
SSDEEP

12288:QWIWVL8142QArsx6yfrqgQMkbi6b7hO2hDg39GP/xQocvCLpjM3lfeVjMImqyu/J:QWI6gBd06vvcHUP/xJMCL55mqyGv6g

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\2be5fc94ec6bcd56cb679e44ba4963e0.exe
"C:\Users\Admin\AppData\Local\Temp\2be5fc94ec6bcd56cb679e44ba4963e0.exe"
1⤵
PID:1836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads