Analysis
-
max time kernel
147s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01-01-2024 15:12
General
-
Target
63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe
-
Size
924KB
-
MD5
ec9c3efe831aaa203058927df7de6138
-
SHA1
b77581e047551a70aaba0db7a57349136bd9e411
-
SHA256
63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222
-
SHA512
0d5aedcebaa660f345c549b9ae07b4d18fc01b563907b378c1cd905029bb0c6f6849e0f03c7c4a724c3448eb9c693138265a0b0129a298af3aada9bb0f447d6a
-
SSDEEP
12288:tZqu3sRwqpxGCMF3dera2ybCPWy5SqZWj+6GJZy82VS1ToBgdoByOHGae0r2ivr:B3yEoro2PEpUA
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe"C:\Users\Admin\AppData\Local\Temp\63fb410fc5267c61c5099927af714a8f5f4ba6dcdeeb1f297b022879767c7222.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: RenamesItself
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD596f275b347d52ed266997f1c56c8cead
SHA115f924b6e8672655d1150225887f34e8b880f13b
SHA256c8306f4f9a76271af8e34fd17c25e056efbfe04a5b5b45f129eab13609fcbf2d
SHA512e4b601ed4f319a4b2798605d3e4b8add7440fe36ddae95df890b05f6acf03d9e72a723b0f18b21f6d5604f900fbd5643fe08a313a58e790accd7e0f6c130ee8a
-
Filesize
952KB
-
Filesize
6.9MB
-
Filesize
368KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB