Analysis
- max time kernel
180s - max time network
196s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
01/01/2024, 15:27
General
- Target 55bc661ad4439400fc434fd6bab66f598c7272854f0453b451e31b84265eff8c.exe
- Size 63KB
- Sample240101-sv2t5sdbdr
- SHA256 55bc661ad4439400fc434fd6bab66f598c7272854f0453b451e31b84265eff8c
Score
7/10
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\55bc661ad4439400fc434fd6bab66f598c7272854f0453b451e31b84265eff8c.exe"C:\Users\Admin\AppData\Local\Temp\55bc661ad4439400fc434fd6bab66f598c7272854f0453b451e31b84265eff8c.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
UnlockYourFiles4.txt
memory/3340-0-0x0000000074AC0000-0x0000000075270000-memory.dmp
memory/3340-1-0x0000000000570000-0x0000000000588000-memory.dmp
memory/3340-2-0x00000000028E0000-0x00000000028EA000-memory.dmp
memory/3340-3-0x00000000054A0000-0x0000000005A44000-memory.dmp
memory/3340-4-0x0000000074AC0000-0x0000000075270000-memory.dmp
memory/3340-5-0x0000000004FA0000-0x0000000005032000-memory.dmp
memory/3340-6-0x00000000051B0000-0x00000000051C0000-memory.dmp
memory/3340-283-0x00000000051B0000-0x00000000051C0000-memory.dmp