Analysis
- max time kernel
142s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
15/01/2024, 18:42
General
- Target 8de4300dc3b969d9e039a9b42ce4cb4e8a200046c14675b216cceaf945734e1f.exe
- Size 24.6MB
- Sample240115-xcbx8aebd2
- SHA256 8de4300dc3b969d9e039a9b42ce4cb4e8a200046c14675b216cceaf945734e1f
Score
7/10
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8de4300dc3b969d9e039a9b42ce4cb4e8a200046c14675b216cceaf945734e1f.exe"C:\Users\Admin\AppData\Local\Temp\8de4300dc3b969d9e039a9b42ce4cb4e8a200046c14675b216cceaf945734e1f.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4956-0-0x00007FFCEDFD0000-0x00007FFCEE1C5000-memory.dmp
memory/4956-1-0x00007FFCEC310000-0x00007FFCEC3CE000-memory.dmp
memory/4956-2-0x00007FFCEBCA0000-0x00007FFCEBF69000-memory.dmp
memory/4956-3-0x00007FF7E5690000-0x00007FF7E6EC4000-memory.dmp