Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
03/04/2024, 09:07
Behavioral task
behavioral1
Sample
50023b44340bcb95fd71541e38d515607bbd2b5a8f7defe8fbd9759cdd4ec659.exe
Resource
win7-20231129-en
2 signatures
150 seconds
General
- Target 50023b44340bcb95fd71541e38d515607bbd2b5a8f7defe8fbd9759cdd4ec659.exe
- Size 9.0MB
- Sample240403-k3fymsbd2w
- SHA256 50023b44340bcb95fd71541e38d515607bbd2b5a8f7defe8fbd9759cdd4ec659
- MD5 2adc9f6e19047cb2cdab667e5c2b1096
- SHA1 fc80f965378907b955576ef49edbe0a6c57e2c42
- SHA512 945eacf4cd5999b05744906973925c7fb26952d015c1a72b46cda07253137fc4e736cab983fe953acc3d7a40f0232bbe8b12cf7fee74b9f1ebb2b5a9b0de24c7
- SSDEEP 196608:noJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:oODKlFBqauayOclfhRQIG2
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4648 50023b44340bcb95fd71541e38d515607bbd2b5a8f7defe8fbd9759cdd4ec659.exe 4648 50023b44340bcb95fd71541e38d515607bbd2b5a8f7defe8fbd9759cdd4ec659.exe