Analysis
- max time kernel
138s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
20/06/2024, 03:42
Behavioral task
behavioral1
Sample
5a978bbce42973cf229d1b9cb4441c8c547deaf15223f8eb778938b7dac0e4c5.exe
Resource
win7-20240508-en
2 signatures
150 seconds
General
- Target 5a978bbce42973cf229d1b9cb4441c8c547deaf15223f8eb778938b7dac0e4c5.exe
- Size 9.0MB
- Sample240620-d9dnjaxalf
- SHA256 5a978bbce42973cf229d1b9cb4441c8c547deaf15223f8eb778938b7dac0e4c5
- MD5 1c0c1ff38e5598d0f1418087ed54f6cf
- SHA1 4c683ae353b120a6a32d3ca950b2ce2d4ac8ed9a
- SHA512 5f3f04c2b88ee992540c6b9e8a61ba6ab7fca1208d666f3dd4172baa8dbfce177e6c3daea737a89da0137d3742b8605d7e3b3cbceaf360c89ed84d19ca79ba4e
- SSDEEP 196608:nwJcDKlFBqZcPzFwDxURK8vyqByLdlf3hRQIgLKN:wODKlFBqauayOclfhRQIG2
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2656 5a978bbce42973cf229d1b9cb4441c8c547deaf15223f8eb778938b7dac0e4c5.exe 2656 5a978bbce42973cf229d1b9cb4441c8c547deaf15223f8eb778938b7dac0e4c5.exe