1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5

Analysis

max time kernel
140s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 11:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe
Size

9.0MB
MD5

57b058d0f47b6305470796f16ce79604
SHA1

e1e1d0d3d1df254edd07a5941ef770cb20bfebf9
SHA256

1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5
SHA512

bd26bd3d16bac173756c621fe87365279f2b5292c10dc2a29c64bb9243bf6c0c85cee77a9b48734a8148559aedf1b82f1eeae6c39e743192c4160a908c9c57da
SSDEEP

196608:nBJcDKlFBqlA0wDxURK8vyqByLdlf3hRQIgLKN:BODKlFBqwayOclfhRQIG2

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe

pid	process
3648	1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe
3648	1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe

C:\Users\Admin\AppData\Local\Temp\1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe
"C:\Users\Admin\AppData\Local\Temp\1e8bc6b15db91499fba8590113d551a1e299cf95d7effeb23dcc183bc5c5dbe5.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3648

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads