Analysis
- max time kernel
157s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
03/04/2024, 10:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1144e9e339e2d343ff4bf22acb3252d78d86228f8950ecaabb2f91b277e63ef3.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
- Target 1144e9e339e2d343ff4bf22acb3252d78d86228f8950ecaabb2f91b277e63ef3.exe
- Size 95KB
- Sample240403-l37a9scd39
- SHA256 1144e9e339e2d343ff4bf22acb3252d78d86228f8950ecaabb2f91b277e63ef3
- MD5 cd3d26b646117fd077746ba3e43dce4f
- SHA1 5ce31547578476481b48caa48e88e089aeb21d31
- SHA512 5ef4421db1e357bc4619c30cb4fae0d243cc704131b00b2186df3fe0762448c0ce4a4cdcd6f0540f76f268c2b311c25b81acfea194fad526ffa884287dba0226
- SSDEEP 1536:lv660aPXi6PX22fqwKWidj/tf+OZEtckaTP5nMBuONn+RfV437/ZuzG1P3N2UhyI:7/vxiF/pstBaDqwONnct437Bl3N2Ut
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 456 1144e9e339e2d343ff4bf22acb3252d78d86228f8950ecaabb2f91b277e63ef3.exe 456 1144e9e339e2d343ff4bf22acb3252d78d86228f8950ecaabb2f91b277e63ef3.exe