Analysis
- max time kernel
147s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
03/04/2024, 09:11
Behavioral task
behavioral1
Sample
d59f74807455261c64771fbee28af1f8870102e30a4ad94e088739a8d6dff9b4.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
- Target d59f74807455261c64771fbee28af1f8870102e30a4ad94e088739a8d6dff9b4.exe
- Size 7.2MB
- Sample240403-k52ccsbd4s
- SHA256 d59f74807455261c64771fbee28af1f8870102e30a4ad94e088739a8d6dff9b4
- MD5 9261ad3a72db9351297c9645e004da54
- SHA1 09e0cb02187b009d9ac5dd56c7741da49d34008a
- SHA512 284e9625ed6f24b36e8ed8f17df651582efad499e0a49bcbe511433c75b0bda0d289f90964768d566b0740b2a72ca2d68f8559b355c262c517ba0744b472a69a
- SSDEEP 196608:ZDsJcDKlFBqZcPzcCQ8zXs5XvyCMYpr/nGLtwN:9sODKlFBqalXsBvyCpLGLtw
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1716 d59f74807455261c64771fbee28af1f8870102e30a4ad94e088739a8d6dff9b4.exe 1716 d59f74807455261c64771fbee28af1f8870102e30a4ad94e088739a8d6dff9b4.exe