Analysis
-
max time kernel
142s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
01-02-2024 07:49
General
-
Target
86552866d14bb032a92d3d80b7b31929.exe
-
Size
878KB
-
MD5
86552866d14bb032a92d3d80b7b31929
-
SHA1
66b9006323c3ada3851468bace5c1e0df7dc0b31
-
SHA256
ae7dbd2586471669127e85f994e87b628876aac2b5f7a33738c82dc7cd4fb8b1
-
SHA512
27c2eab6cdeb98e314e00a5e4216c1da010f9f2692153b662a04a224c937867ee1150f0ee4b3cbc3f8be313546923020970101b84ed6a6ba5b6829aafda23a27
-
SSDEEP
24576:e3pRurPdW79gz4ptp/zLzuBDWTS3pTik2q:e3pRWy3pPzmhZTik2
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\86552866d14bb032a92d3d80b7b31929.exe"C:\Users\Admin\AppData\Local\Temp\86552866d14bb032a92d3d80b7b31929.exe"1⤵
- Adds Run key to start application
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5963b9ae81d998418b9b117e080c91778
SHA1df14aa6e776c260a3cf62ce68806d4ea6c42249e
SHA2566ed683f0609f169455426c386799c239313427de2487b95646059235d972e6a9
SHA512b5dd68bcc72613c80948ef4be1f659b8f95a78679eb512adaeafb1454a7ef77c5439f210957efd1f0071d42ea5f73d415cd15dd1d57d793b6b66311a8260674a
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4KB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB
-
Filesize
4.2MB