Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 11:48
Behavioral task
behavioral1
Sample
1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
-
Target
1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe
-
Size
9.0MB
-
MD5
57b058d0f47b6305470796f16ce79604
-
SHA1
e1e1d0d3d1df254edd07a5941ef770cb20bfebf9
-
SHA256
1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5
-
SHA512
bd26bd3d16bac173756c621fe87365279f2b5292c10dc2a29c64bb9243bf6c0c85cee77a9b48734a8148559aedf1b82f1eeae6c39e743192c4160a908c9c57da
-
SSDEEP
196608:nBJcDKlFBqlA0wDxURK8vyqByLdlf3hRQIgLKN:BODKlFBqwayOclfhRQIG2
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exepid process 1924 1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe 1924 1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe