4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c

Analysis

max time kernel
134s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 19:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c.exe
Size

7.2MB
MD5

97322f271a3019ebc2aea2770f4eb271
SHA1

f15a68fa1a9aaab97cd8e565c68a550eef6d9e4a
SHA256

4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c
SHA512

891ce2fef9d309cf31a0f6129e14b8cd3c0f2b4df08d538c103ea2bfb89efc8e3e00da41b45c14bf11c4a61a747af1269ba4931d0f282bff90b84376d64a0891
SSDEEP

196608:9DRJcDKlFBqhRK85Xs5XvyCMYpr/nGLtwN:ZRODKlFBq7XsBvyCpLGLtw

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2216	4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c.exe
2216	4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c.exe

C:\Users\Admin\AppData\Local\Temp\4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c.exe
"C:\Users\Admin\AppData\Local\Temp\4e7032ec847ba5b730abf6c1abd3c90745e391e955f24539c0d68f2bd6f4d97c.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...