Analysis
- max time kernel
118s - max time network
121s - platform
windows7_x64 - resource
win7-20231215-en - resource tags
- submitted
01/01/2024, 15:27
General
- Target 7e41197b74e2dcc6c0563d4b71a4ad16293909889ce4f1c5ab214bdd59088667.exe
- Size 153KB
- Sample240101-sv2t5sdbdr
- SHA256 7e41197b74e2dcc6c0563d4b71a4ad16293909889ce4f1c5ab214bdd59088667
Score
9/10
Malware Config
Signatures
- Renames multiple (66) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e41197b74e2dcc6c0563d4b71a4ad16293909889ce4f1c5ab214bdd59088667.exe"C:\Users\Admin\AppData\Local\Temp\7e41197b74e2dcc6c0563d4b71a4ad16293909889ce4f1c5ab214bdd59088667.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3012-0-0x0000000000A50000-0x0000000000A7C000-memory.dmp
memory/3012-1-0x000007FEF51D0000-0x000007FEF5BBC000-memory.dmp
memory/3012-2-0x000000001ACC0000-0x000000001AD40000-memory.dmp
memory/3012-135-0x000007FEF51D0000-0x000007FEF5BBC000-memory.dmp
memory/3012-136-0x000000001ACC0000-0x000000001AD40000-memory.dmp
memory/3012-137-0x000000001ACC0000-0x000000001AD40000-memory.dmp
memory/3012-138-0x000000001ACC0000-0x000000001AD40000-memory.dmp