Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 15:53
Behavioral task
behavioral1
Sample
d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
General
-
Target
d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c.exe
-
Size
7.2MB
-
MD5
2ab274d3dd01805af41a5a10d3453e02
-
SHA1
9f0d40f8f594ac79d5716c5b79d3a6dc4be604bd
-
SHA256
d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c
-
SHA512
f3b867419dde3089a10692a9edc6b977330435ab01bd930f40ba82a2faa3df526ec8e0a92884b47f4db0dd1e70b94fc5a2704db26edb5561af6292fb1beb9b93
-
SSDEEP
196608:9D8JcDKlFBqZcPz0RK85Xs5XvyCMYpr/nGLtwN:Z8ODKlFBqakXsBvyCpLGLtw
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c.exepid process 2148 d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c.exe 2148 d670f2637ed9a756efb1c5a2b6bfd964ea7f261c436ed946d9086564524af96c.exe