8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 20:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe
Size

7.2MB
MD5

3b8fa40d62e597c4d2abb39459f9dbbd
SHA1

1d4ce254309b7c607aa7e2d82476316051a3b7ac
SHA256

8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83
SHA512

af66528dda244d4ad2377c8b3dfe3d4efe0150416550f647f81140e0caa5b74eee17763ec05475159d3769e6084c373e2b0160a92a08dfba59a9be29b25fd12b
SSDEEP

196608:9DqJcDKlFBqhRK85Xs5XvyCMYpr/nGLtwN:ZqODKlFBq7XsBvyCpLGLtw

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe

pid	process
1928	8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe
1928	8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe

C:\Users\Admin\AppData\Local\Temp\8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe
"C:\Users\Admin\AppData\Local\Temp\8ebf9effe68c31b6aa9437b41ea2b4c7d9df0328c41578c020073bde7e6f1c83.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads