4be5926e05095a40f520ee2b7cf9c1eb8c608570869a3ffbc01feddcf9e6a1d1 | Triage

Submit
Reports

Overview

overview

7

Static

static

1

SecuriteIn...09.exe

windows7-x64

7

SecuriteIn...09.exe

windows10-2004-x64

7

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2024 10:31

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.Trojan.MSIL.Agent.13157.13509.exe

Resource

win7-20240221-en

spyware stealer

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

SecuriteInfo.com.Trojan.MSIL.Agent.13157.13509.exe

Resource

win10v2004-20240226-en

spyware stealer

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

SecuriteInfo.com.Trojan.MSIL.Agent.13157.13509.exe
Size

40KB
MD5

fdb249e9f54dc03c7ac1a4513d6ee233
SHA1

f6579422ef9da63a652ec8a7a029e152aa000915
SHA256

4be5926e05095a40f520ee2b7cf9c1eb8c608570869a3ffbc01feddcf9e6a1d1
SHA512

8950c191b9fe5063106fe5e3baa06e553a73d7b8547f815e934d4ea5f6bb64389fb17dfe700ef8b6c34f04b966c6fd50d4666ca483ca2d93e93e899ee1ed368f
SSDEEP

768:M4aqgcRPCOZuQISosPyehgl4TdTLs1PBbAcLr2BXxjV1VaXLkjO:KaIP4TdTLs1PBbAc/+BjP0l

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Processes

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.MSIL.Agent.13157.13509.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.MSIL.Agent.13157.13509.exe"
1⤵
PID:3336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Bookmarks

Filesize
723B

MD5
6669c1a8c106fb216f6fd36ad1c8e002

SHA1
341df75ab214aae9adc7aa14bccd527a70f58c14

SHA256
0aca767d30803d44e900b7f333ee7d90b2e0b221065290699fc31fbcb4da8479

SHA512
2887f8e18e5d2feb35f80ec4ad36120b1d8030d5c647cf7bd65d86390b686917adaa5947c002e9fe0b1eb2ba4c004e7e3ea991844da136ea5540ad1fae9f4c8d

Download Submit
memory/3336-0-0x0000000074900000-0x00000000750B0000-memory.dmp

Filesize
7.7MB

Download
memory/3336-1-0x00000000002B0000-0x00000000002BE000-memory.dmp

Filesize
56KB

Download
memory/3336-10-0x0000000074900000-0x00000000750B0000-memory.dmp

Filesize
7.7MB

Download

© 2018-2024

Terms | Privacy