Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 10:59
Behavioral task
behavioral1
Sample
d0101a2809d3ad5e8434fed6c0d9667172b14b65f5d90b7b585557893dd4f31d.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
General
-
Target
d0101a2809d3ad5e8434fed6c0d9667172b14b65f5d90b7b585557893dd4f31d.exe
-
Size
9.0MB
-
MD5
7445479c75d09af06eace8f1f51943a4
-
SHA1
bb97bad70eba7d8d87f6a00aaaf7122515b4571e
-
SHA256
d0101a2809d3ad5e8434fed6c0d9667172b14b65f5d90b7b585557893dd4f31d
-
SHA512
f6d49dd766f8b537dd713217d7e5631a7f96bf0d11263864c4fec421fc5bac85a7321e5d125344ad0f3b8151a60ca913beb05e3f3757cdc3028aabf3dc16c7d8
-
SSDEEP
196608:nvJcDKlFBqkwDxURK8vyqByLdlf3hRQIgLKN:vODKlFBqHayOclfhRQIG2
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3040 d0101a2809d3ad5e8434fed6c0d9667172b14b65f5d90b7b585557893dd4f31d.exe 3040 d0101a2809d3ad5e8434fed6c0d9667172b14b65f5d90b7b585557893dd4f31d.exe